CVE-2020-2506

Timeline

Detection, updates, and resolution for this record.

1. Feb 3, 2021 · Catalog

   Detected

   The vulnerability have been reported to affect earlier versions of QTS. If exploited, this improper access control vulnerability could allow attackers to compromise the security of the software by gaining privileges, or reading sensitive information. This issue affects: QNAP Systems Inc. Helpdesk versions prior to 3.0.3.

2. Mar 25, 2022 · CISA KEV

   Known exploited

   Apply updates per vendor instructions.

3. Apr 15, 2022 · CISA KEV

   Remediation due

   Apply updates per vendor instructions.

4. Jun 16, 2026 · Catalog

   Updated

   The vulnerability have been reported to affect earlier versions of QTS. If exploited, this improper access control vulnerability could allow attackers to compromise the security of the software by gaining privileges, or reading sensitive information. This issue affects: QNAP Systems Inc. Helpdesk versions prior to 3.0.3.

Affected

• cpe qnap/helpdeskversion unspecified
• vendor QNAP Systems Helpdeskversion unspecified

Sources

• CISA KEVCVE-2020-2506

  QNAP Helpdesk contains an improper access control vulnerability which could allow an attacker to gain privileges or to read sensitive information.

  cisa.gov
• CVE.orgCVE-2020-2506

  Official CVE identifier

  cve.org
• FIRST EPSSCVE-2020-2506

  30-day exploitation probability 2.0%

  first.org
• NIST NVDCVE-2020-2506

  The vulnerability have been reported to affect earlier versions of QTS. If exploited, this improper access control vulnerability could allow attackers to compromise the security of the software by gaining privileges, or reading sensitive information. This issue affects: QNAP Syst

  nvd.nist.gov

References

• CISA note · nvd.nist.gov
• US Government Resource · cisa.gov
• Vendor Advisory · qnap.com