vulnerability
QNAP QTS: CVE-2021-20254: SMB Out-of-Bounds Read Vulnerability in QTS and QuTS hero
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 5 | (AV:N/AC:M/Au:S/C:P/I:P/A:N) | Jun 16, 2021 | Aug 4, 2025 | Oct 16, 2025 |
Severity
5
CVSS
(AV:N/AC:M/Au:S/C:P/I:P/A:N)
Published
Jun 16, 2021
Added
Aug 4, 2025
Modified
Oct 16, 2025
Description
An SMB out-of-bounds read vulnerability has been reported to affect QNAP NAS running QTS and QuTS hero. If exploited, this vulnerability allows attackers to obtain sensitive information on the system. We have already fixed this vulnerability in the following versions: QTS 4.5.3.1670 Build 20210515 and later QuTS hero h4.5.3.1670 build 20210515 and later QuTScloud c4.5.5.1656 build 20210503 and later
Solution
qnap-qts-upgrade-latest
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.