CVE-2021-38687
A stack buffer overflow vulnerability has been reported to affect QNAP NAS running Surveillance Station. If exploited, this vulnerability allows attackers to execute arbitrary code. We have already...
Affects 2 products across 1 vendor.
Program copies data to a buffer without verifying the source data fits within the destination.
Show all 13
Mapping is CWE-to-CAPEC per MITRE CAPEC 3.9.
A stack buffer overflow vulnerability in QNAP NAS running Surveillance Station allows attackers to execute arbitrary code.
BSID: BS-2021-GLOBAL-071727-C • Model: /workspace/models/qwen2.5-coder-32b-instruct-bf16 • Confidence: HIGH
Is this CVE in your environment?
BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.
Check My Environment →What is CVE-2021-38687?
What is the CVSS score for CVE-2021-38687?
Is CVE-2021-38687 actively exploited?
How do I remediate CVE-2021-38687?
What systems are affected by CVE-2021-38687?
| CVE ID | CVE-2021-38687 |
|---|---|
| BSID | BS-2021-GLOBAL-071727-C BreachSpider Global ID |
| CVSS Vector | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| Published | 2021-12-29 |
| Last Modified | 2024-11-21 |
| ICS Relevance | 80% |
| Weakness (CWE) | |
| Source | NVD |
A stack buffer overflow vulnerability has been reported to affect QNAP NAS running Surveillance Station. If exploited, this vulnerability allows attackers to execute arbitrary code. We have already fixed this vulnerability in the following versions of Surveillance Station: QTS 5.0.0 (64 bit): Surveillance Station 5.2.0.4.2 ( 2021/10/26 ) and later QTS 5.0.0 (32 bit): Surveillance Station 5.2.0.3.2 ( 2021/10/26 ) and later QTS 4.3.6 (64 bit): Surveillance Station 5.1.5.4.6 ( 2021/10/26 ) and later QTS 4.3.6 (32 bit): Surveillance Station 5.1.5.3.6 ( 2021/10/26 ) and later QTS 4.3.3: Surveillance Station 5.1.5.3.6 ( 2021/10/26 ) and later
Source: NIST NVD / MITRE CVE Database
The vulnerability is exploited through a buffer overflow in the handling of certain network packets, leading to arbitrary code execution.
Exploitation Likelihood: HIGH
| CISA KEV | Not in KEV catalog |
|---|---|
| Public Exploit | Not confirmed |
| PoC Code | Not confirmed |
SAGE Enrichment Record — provenance & audit hash
| Model | /workspace/models/qwen2.5-coder-32b-instruct-bf16 |
|---|---|
| Confidence | HIGH |
| Enriched At | 2026-05-24 |
| SHA-512 Audit Hash | 60a50b26417cc7d904f0064603512cb03514a0ee3165b6ea55a1d5a5d9e1624451b6e88327e9da1130e7653ac3f813ffe928c2905f671e0937cbbaf255103d78 |
Critical Severity - Know Your Exposure
A CVSS 9.8 vulnerability in your ICS environment cannot wait. BreachSpider maps critical CVEs to your specific assets and tells you what to fix first.
Check Your Assets Free →