PT-2018-8412 · Qnap · Qnap Qfinder Pro

Tony Martin · Publicado 2018-03-05 · Atualizado 2018-03-29 · CVE-2017-7633

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions QNAP Qfinder Pro versions 6.1.0.0317 and earlier

Description The issue may expose sensitive information contained in NAS devices, potentially allowing attackers to further compromise the device.

Recommendations For QNAP Qfinder Pro versions 6.1.0.0317 and earlier, update to a version later than 6.1.0.0317 to resolve the issue.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2017-7633

Produtos afetados

Qnap Qfinder Pro

Referências · 3

• https://osv.dev/vulnerability/CVE-2017-7633 · Aviso do Fabricante
• https://qnap.com/zh-tw/security-advisory/nas-201802-27 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-7633 · Nota de Segurança