Record status Published
Identifier year (not publication year) 2021
Source publication May 13, 2021
Source updated Oct 21, 2025
Imported by cveboard Oct 24, 2026
CNA source text (English) Improper Authorization Vulnerability in HBS 3 (Hybrid Backup Sync)
An improper authorization vulnerability has been reported to affect QNAP NAS running HBS 3 (Hybrid Backup Sync. ) If exploited, the vulnerability allows remote attackers to log in to a device. This issue affects: QNAP Systems Inc. HBS 3 versions prior to v16.0.0415 on QTS 4.5.2; versions prior to v3.0.210412 on QTS 4.3.6; versions prior to v3.0.210411 on QTS 4.3.4; versions prior to v3.0.210411 on QTS 4.3.3; versions prior to v16.0.0419 on QuTS hero h4.5.1; versions prior to v16.0.0419 on QuTScloud c4.5.1~c4.5.4. This issue does not affect: QNAP Systems Inc. HBS 2 . QNAP Systems Inc. HBS 1.3 .
Scoped product and version facts Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
HBS 3
Vendor QNAP Systems Inc.
Product HBS 3
Default status Unknown
HBS 3 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
unspecified affectedcustom v16.0.0415 Unavailable None listed
HBS 3
Vendor QNAP Systems Inc.
Product HBS 3
Default status Unknown
HBS 3 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
unspecified affectedcustom v3.0.210412 Unavailable None listed
HBS 3
Vendor QNAP Systems Inc.
Product HBS 3
Default status Unknown
HBS 3 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
unspecified affectedcustom v3.0.210411 Unavailable None listed
HBS 3
Vendor QNAP Systems Inc.
Product HBS 3
Default status Unknown
HBS 3 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
unspecified affectedcustom v3.0.210411 Unavailable None listed
HBS 3
Vendor QNAP Systems Inc.
Product HBS 3
Default status Unknown
HBS 3 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
unspecified affectedcustom v16.0.0419 Unavailable None listed
HBS 3
Vendor QNAP Systems Inc.
Product HBS 3
Default status Unknown
HBS 3 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
unspecified affectedcustom v16.0.0419 Unavailable None listed
HBS 2
Vendor QNAP Systems Inc.
Product HBS 2
Platforms Unknown
Default status Unknown
HBS 2 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
all versions unaffectedUnavailable Unavailable Unavailable None listed
HBS 1.3
Vendor QNAP Systems Inc.
Product HBS 1.3
Platforms Unknown
Default status Unknown
HBS 1.3 · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status)
all versions unaffectedUnavailable Unavailable Unavailable None listed