HBS 3 vulnerabilities

2 known vulnerabilities in HBS 3 from QNAP. 2 are rated high or critical, and 1 has been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  HBS 3 Hybrid Backup Sync: Improper Neutralization of Special Elements used in a Command

  CVE-2024-50388Dec 6, 2024QNAPEPSS 2.3%

  An OS command injection vulnerability has been reported to affect HBS 3 Hybrid Backup Sync. If exploited, the vulnerability could allow remote attackers to execute commands. We have already fixed the vulnerability in the following version: HBS 3 Hybrid Backup

• 9.8 Critical severity

  QNAP NAS Improper Authorization Exploited

  CVE-2021-28799May 13, 2021QNAPEPSS 78.3%

  An improper authorization vulnerability has been reported to affect QNAP NAS running HBS 3 (Hybrid Backup Sync. ) If exploited, the vulnerability allows remote attackers to log in to a device. This issue affects: QNAP Systems Inc. HBS 3 versions prior to v16.0