Stack Overflow Vulnerability in QVR Elite, QVR Pro and QVR Guard (QNAP Systems Inc. QVR Elite)

CVE-2021-38691

HIGH 8.1

At a glance

Source: NVD
EPSS: EPSS 1.30 % · percentile 70 (2026-11-01)
State: PUBLISHED
Published: 2022-01-14 01:00 UTC
Updated: 2024-09-17 04:03 UTC
Assigner: qnap
NVD status: Modified

Search on…

Description

A stack buffer overflow vulnerability has been reported to affect QNAP device running QVR Elite, QVR Pro, QVR Guard. If exploited, this vulnerability allows attackers to execute arbitrary code. We have already fixed this vulnerability in the following versions of QVR Elite, QVR Pro, QVR Guard: QuTS hero h5.0.0: QVR Elite 2.1.4.0 (2021/12/06) and later QuTS hero h4.5.4: QVR Elite 2.1.4.0 (2021/12/06) and later QTS 5.0.0: QVR Elite 2.1.4.0 (2021/12/06) and later QTS 4.5.4: QVR Elite 2.1.4.0 (2021/12/06) and later QTS 4.5.4: QVR Pro 2.1.3.0 (2021/12/06) and later QTS 5.0.0: QVR Pro 2.1.3.0 (2021/12/06) and later QTS 4.5.4: QVR Guard 2.1.3.0 (2021/12/06) and later QTS 5.0.0: QVR Guard 2.1.3.0 (2021/12/06) and later

Weaknesses (CWE)

CWE-120 — Buffer Copy without Checking Size of Input
CWE-787 — Out-of-bounds Write

References

https://www.qnap.com/en/security-advisory/qsa-21-59

Scores

Version	Score	Vector	Scored by
CVSS 3.1	HIGH 8.1	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H	qnap
CVSS 3.1	HIGH 8.1	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H	NVD · security@qnapsecurity.com.tw (Secondary)
CVSS 3.1	CRITICAL 9.8	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	NVD · nvd@nist.gov (Primary)
CVSS 2.0	HIGH 7.5	AV:N/AC:L/Au:N/C:P/I:P/A:P	NVD · nvd@nist.gov (Primary)

European references

ENISA EUVD · EUVD-2021-25130
GCVE · GCVE-0-2021-38691

CERT-FR advisories

CERTFR-2022-AVI-033 — Multiples vulnérabilités dans les produits QNAP · cert.ssi.gouv.fr

Affected configurations (NVD CPE)

cpe:2.3:a:qnap:qvr_elite:*:*:*:*:*:*:*:* < 2.1.4.0
cpe:2.3:a:qnap:qvr_guard:*:*:*:*:*:*:*:* < 2.1.3.0
cpe:2.3:a:qnap:qvr_pro:*:*:*:*:*:*:*:* < 2.1.3.0

Affected products

Product	Versions
QNAP Systems Inc. · QVR Elite	affected unspecified < 2.1.4.0 (2021/12/06)
QNAP Systems Inc. · QVR Elite	affected unspecified < 2.1.4.0 (2021/12/06)
QNAP Systems Inc. · QVR Elite	affected unspecified < 2.1.4.0 (2021/12/06)
QNAP Systems Inc. · QVR Elite	affected unspecified < 2.1.4.0 (2021/12/06)
QNAP Systems Inc. · QVR Pro	affected unspecified < 2.1.3.0 (2021/12/06)
QNAP Systems Inc. · QVR Pro	affected unspecified < 2.1.3.0 (2021/12/06)
QNAP Systems Inc. · QVR Guard	affected unspecified < 2.1.3.0 (2021/12/06)
QNAP Systems Inc. · QVR Guard	affected unspecified < 2.1.3.0 (2021/12/06)

Sources

Source	Licence
CVE List (CVEProject cvelistV5)	CVE Program Terms of Use
EPSS (FIRST.org)	FIRST — attribution requested
ENISA EUVD	ENISA — reproduction authorised, source acknowledged
CERT-FR (ANSSI)	Licence Ouverte / Etalab 2.0
NVD (NIST) via fkie-cad/nvd-json-data-feeds	Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD

⚠️ Stack Overflow Vulnerability in QVR Elite, QVR Pro and QVR Guard (QNAP Systems Inc. QVR Elite)