Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Insufficiently Protected Credentials Vulnerability in QSW-M2116P-2T2S and QuNetSwitch
Vulnerability Description
A vulnerability involving insecure storage of sensitive information has been reported to affect QSW-M2116P-2T2S and QNAP switches running QuNetSwitch. If exploited, this vulnerability allows remote attackers to read sensitive information by accessing the unrestricted storage mechanism.We have already fixed this vulnerability in the following versions: QSW-M2116P-2T2S 1.0.6 build 210713 and later QGD-1600P: QuNetSwitch 1.0.6.1509 and later QGD-1602P: QuNetSwitch 1.0.6.1509 and later QGD-3014PT: QuNetSwitch 1.0.6.1519 and later
CVSS Information
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:H
Vulnerability Type
使用硬编码的口令
Vulnerability Title
QSW-M2116P-2T2S 安全漏洞
Vulnerability Description
Qnap Systems QSW-M2116P-2T2S是中国威联通（Qnap Systems）公司的适用于 Wi-Fi 6 代的 90 瓦 10GbE PoE++ 和 30 瓦 2.5GbE PoE+ 管理型交换机。 QSW-M2116P-2T2S 存在安全漏洞，该漏洞允许远程攻击者通过访问不受限制的存储机制来读取敏感信息。以下产品及版本受到影响：QSW-M2116P-2T2S 1.0.6之前版本， QuNetSwitch 1.0.6.1509之前版本，QuNetSwitch 1.0.6.1509 之前
CVSS Information
N/A
Vulnerability Type
N/A