CVSS 3.1
7.5 highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NCVE-2021-26620
High (7.5) in iptime. EPSS 1.4% chance of exploitation in the next 30 days.
An improper authentication vulnerability leading to information leakage was discovered in iptime NAS2dual. Remote attackers are able to steal important information in the server by exploiting vulnerabilities such as insufficient authentication when accessing the shared folder and changing user’s passwords.
Severity
- EPSS
- 1.4% chance of exploitation in the next 30 days; higher than 71% of CVEs (scores of 2026-10-31)
- CWE
- CWE-287
- Published
- Modified
- Record from
- the NVD, synced
Affected
- iptime:nas-i_firmware
- iptime:nas-ii_firmware
- iptime:nas-iie_firmware
- iptime:nas101_firmware
- iptime:nas1dual_firmware
- iptime:nas2dual_firmware
- iptime:nas3_firmware
- iptime:nas4_firmware
- iptime:nas4dual_firmware