PT-2018-8416 · Qnap · Qnap Nas

Tony Martin · Publicado 2018-06-05 · Atualizado 2018-07-12 · CVE-2017-7637

Positive Technologies (AI Summary)

CVSS v3.1

10

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions QNAP NAS application Proxy Server versions prior to 1.2.1

Description The issue allows remote attackers to run arbitrary OS commands against the system with root privileges.

Recommendations For versions prior to 1.2.1, update to version 1.2.1 or later to resolve the issue.

Correção

OS Command Injection

Enumeração de Fraquezas

CWE-78

Identificadores relacionados

CVE-2017-7637

Produtos afetados

Qnap Nas

Referências · 4

• http://securitytracker.com/id/1041025 · Nota
• https://qnap.com/en/security-advisory/nas-201806-01 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2017-7637 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-7637 · Nota de Segurança