CVE:CVE-2021-28805
CNNVD:CNNVD-202106-1195
QNAP Systems QSS是中国威联通（QNAP Systems）公司的一款非网管型交换机。
QNAP Switch System (QSS)存在安全漏洞，该漏洞源于源代码中包含敏感信息。攻击者可利用该漏洞读取应用程序数据。以下产品和版本受到影响：QNAP Systems Inc. QSS versions prior to 1.0.3 build 20210505 on QSW-M2108-2C; versions prior to 1.0.3 build 20210505 on QSW-M2108-2S; versions prior to 1.0.3 build 20210505 on QSW-M2108R-2C; versions prior to 1.0.12 build 20210506 on QSW-M408.
solution:Upgrade qnap qss to a higher version than 1.0.3,1.0.12,and avoid the version (,1.0.3),(,1.0.12)