PT-2017-12910 · Qnap · Qnap Video Station+1

李衍龙 + 1 · Publicado 2017-11-22 · Atualizado 2017-12-12 · CVE-2017-13071

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions QNAP Video Station versions prior to 5.1.3 (for QTS 4.3.3) and 5.2.0 (for QTS 4.3.4)

Description This issue allows a remote attacker to run arbitrary commands.

Recommendations For QNAP Video Station version 5.1.3 (for QTS 4.3.3) and later, no action is required as the issue has been patched. For QNAP Video Station versions prior to 5.1.3 (for QTS 4.3.3) and 5.2.0 (for QTS 4.3.4), update to the latest version to resolve the issue.

Correção

Command Injection

Enumeração de Fraquezas

CWE-77

Identificadores relacionados

CVE-2017-13071

Produtos afetados

Qnap Video Station

Qts

Referências · 3

• https://osv.dev/vulnerability/CVE-2017-13071 · Aviso do Fabricante
• https://qnap.com/zh-tw/security-advisory/nas-201711-21 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-13071 · Nota de Segurança