CVE-2021-44055— Information leakage in Video Station
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2021-44055
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Information leakage in Video Station
Source: NVD (National Vulnerability Database)
Vulnerability Description
An missing authorization vulnerability has been reported to affect QNAP device running Video Station. If exploited, this vulnerability allows remote attackers to access data or perform actions that they should not be allowed to perform. We have already fixed this vulnerability in the following versions of Video Station: Video Station 5.5.9 ( 2022/02/16 ) and later
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Source: NVD (National Vulnerability Database)
Vulnerability Type
授权机制缺失
Source: NVD (National Vulnerability Database)
Vulnerability Title
QNAP Systems Video Station 授权问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
QNAP Systems Video Station是中国威联通（QNAP Systems）公司的一款视频管理和播放应用程序。 QNAP Systems Video Station 5.5.9、5.3.13、5.1.8 之前版本存在授权问题漏洞，该漏洞源于授权不正确。远程攻击者利用此漏洞可以访问数据或执行不允许他们执行的操作。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| QNAP Systems Inc. | Video Station | unspecified ~ 5.5.9 ( 2022/02/16 ) | - |
II. Public POCs for CVE-2021-44055
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2021-44055
请登录查看更多情报信息。
- https://www.qnap.com/en/security-advisory/qsa-22-14x_refsource_MISC
- https://nvd.nist.gov/vuln/detail/CVE-2021-44055
Same Patch Batch · QNAP Systems Inc. · 2022-05-05 · 9 CVEs total
| CVE-2022-27588 | 9.8 CRITICAL | Vulnerability in QVR |
| CVE-2021-44051 | 8.8 HIGH | Command injection |
| CVE-2021-44056 | 7.1 HIGH | Improper authentication in Video Station |
| CVE-2021-44057 | 7.1 HIGH | Improper authentication in Photo Station |
| CVE-2021-44052 | 6.5 MEDIUM | Arbitrary file read |
| CVE-2021-44053 | 5.7 MEDIUM | Reflected XSS |
| CVE-2021-38693 | 5.3 MEDIUM | Path Traversal in thttpd |
| CVE-2021-44054 | 4.3 MEDIUM | Open redirect |
IV. Related Vulnerabilities
Same weakness: CWE-862
- CVE-2021-47932
WordPress TheCartPress 1.5.3.6 Privilege Escalation Unauthen - CVE-2025-15634
HCL BigFix WebUI is affected by a missing authorization vuln - CVE-2026-42297
Argo Workflows Is Missing Authorization in Sync ConfigMap Pr - CVE-2026-42174
Kirby: User avatar creation, replacement and deletion are no - CVE-2026-42137
Kirby: `pages.access/list` and `files.access/list` permissio
V. Comments for CVE-2021-44055
No comments yet