CVE-2021-26620 — IPTIME NAS2dual improper authentication vulnerability
An improper authentication vulnerability leading to information leakage was discovered in iptime NAS2dual. Remote attackers are able to steal important information in the server…
Published: 2022-03-25 · CVSS: 7.5 · CVSS 3.1
An improper authentication vulnerability leading to information leakage was discovered in iptime NAS2dual. Remote attackers are able to steal important information in the server by exploiting vulnerabilities such as insufficient authentication when accessing the shared folder and changing user’s passwords.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7