QNAP Systems Inc. QVPN Windows vulnerabilities

3 vulnerabilities

Known vulnerabilities in QNAP Systems Inc. QVPN Windows, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.8CVE-2022-27595qnap systems inc.qvpn windows+1
EPSS score
0.18%
An insecure library loading vulnerability has been reported to affect QVPN Device Client. If exploited, the vulnerability could allow local attackers who have gained user access to execute unauthorized code or commands. We have already fixed the vulnerability in the following versions: QVPN Windows 2.0.0.1316 and later QVPN Windows 2.0.0.1310 and later6.7CVE-2023-23370qnap systems inc.qvpn windows+1
EPSS score
0.16%
An insufficiently protected credentials vulnerability has been reported to affect QVPN Device Client. If exploited, the vulnerability could allow local authenticated administrators to gain access to user accounts and access sensitive data used by the user account via unspecified vectors. We have already fixed the vulnerability in the following version: QVPN Windows 2.1.0.0518 and later5.2CVE-2023-23371qnap systems inc.qvpn windows+1
EPSS score
0.11%
A cleartext transmission of sensitive information vulnerability has been reported to affect QVPN Device Client. If exploited, the vulnerability could allow local authenticated administrators to read sensitive data via unspecified vectors. We have already fixed the vulnerability in the following version: QVPN Windows 2.2.0.0823 and later