Search 191973 CVE descriptions
and 86218 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

Test ID:
Title:QNAP QTS Zerologon Vulnerability
Summary:QNAP QTS is prone to the Zerologon vulnerability.
QNAP QTS is prone to the Zerologon vulnerability.

Vulnerability Insight:
If exploited, this elevation of privilege vulnerability allows remote
attackers to bypass security measures via a compromised QTS device on the network. The NAS may be exposed to
this vulnerability if users have configured the device as a domain controller in Control Panel >
Network & File Services > Win/Mac/NFS > Microsoft Networking.

Affected Software/OS:
QNAP QTS versions 4.3.3, 4.3.4, 4.3.6, 4.4.3 and 4.5.1.

Update to version build 20201006, build 20201006, Build 20200929, build 20200925, build 20201015 or later.

CVSS Score:

CVSS Vector:

Cross-Ref: Common Vulnerability Exposure (CVE) ID: CVE-2020-1472
CERT/CC vulnerability note: VU#490028
SuSE Security Announcement: openSUSE-SU-2020:1513 (Google Search)
SuSE Security Announcement: openSUSE-SU-2020:1526 (Google Search)
CopyrightCopyright (C) 2020 Greenbone Networks GmbH

This is only one of 86218 vulnerability tests in our test suite. Find out more about running a complete security audit.

To run a free test of this vulnerability against your system, register below.

© 1998-2020 E-Soft Inc. All rights reserved.