PT-2017-17857 · Qnap · Qts

Publicado 2017-06-15 · Atualizado 2017-06-22 · CVE-2017-7629

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions QNAP QTS versions prior to 4.2.6 build 20170517

Description The issue is related to a flaw in the change password function.

Recommendations For versions prior to 4.2.6 build 20170517, update to version 4.2.6 build 20170517 or later to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-640

Identificadores relacionados

CVE-2017-7629

Produtos afetados

Qts

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2017-7629 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2017-7629 · Aviso do Fabricante
• https://qnap.com/en-us/releasenotes · Aviso do Fabricante