← CVE Radar
CVE-2020-2506improper access control vulnerability in Helpdesk
The vulnerability have been reported to affect earlier versions of QTS. If exploited, this improper access control vulnerability could allow attackers to compromise the security of the software by gaining privileges, or reading sensitive information. This issue affects: QNAP Systems Inc. Helpdesk versions prior to 3.0.3.
9.8 CRITICALEPSS 2.00%⚡ Known Exploited (CISA KEV)NVD: Analyzed
Overview
Severity
| Score | Severity | Version | Vector String |
|---|---|---|---|
| 9.8 | CRITICAL | 3.1NVD | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| 7.3 | HIGH | 3.1qnap (CNA) | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L |
| 7.5 | HIGH | 2.0NVD | AV:N/AC:L/Au:N/C:P/I:P/A:P |
CISA required action
⚡ Known exploited · remediation due Apr 15, 2022
Apply updates per vendor instructions.
Details
- CVE ID
- CVE-2020-2506
- Status
- Analyzed
- Assigner (CNA)
- qnap
- Published
- Feb 3, 2021
- Last modified
- 2026-06-17 03:12 UTC
- Weaknesses
- CWE-284 · Improper Access Control
Affected Products
As published by the CNA in the CVE record.
QNAP Systems Inc.Helpdesk1 version range
- before 3.0.3