PT-2017-11441 · Qnap · Qnap Nas

Publicado 2017-09-19 · Atualizado 2019-10-03 · CVE-2017-10700

Positive Technologies (AI Summary)

CVSS v3.1

10

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions QNAP NAS version 4.3.3.0229

Description A remote attacker can execute arbitrary system commands as the root user of the NAS application in the medialibrary component.

Recommendations For QNAP NAS version 4.3.3.0229, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2017-10700

Produtos afetados

Qnap Nas

Referências · 4

• https://lateralsecurity.com/downloads/Lateral_Security-Advisory-QNAP_QTS_CVE-2017-10700.pdf · Nota
• https://qnap.com/en/support/con_show.php?cid=128 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-10700 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2017-10700 · Aviso do Fabricante