PT-2018-8417 · Qnap · Media Streaming Add-On

Publicado 2018-03-08 · Atualizado 2018-03-27 · CVE-2017-7638

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions QNAP NAS application Media Streaming add-on versions 421.1.0.2, 430.1.2.0, and earlier

Description The issue is related to improper authentication of requests in the Media Streaming add-on. This could allow for unauthorized changes to Media Streaming settings and potentially lead to the leakage of sensitive information from the QNAP NAS.

Recommendations For versions 421.1.0.2, 430.1.2.0, and earlier, update to a version that properly authenticates requests to prevent unauthorized changes and data leakage. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2017-7638

Produtos afetados

Media Streaming Add-On

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2017-7638 · Nota de Segurança
• https://qnap.com/zh-tw/security-advisory/nas-201803-08 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2017-7638 · Aviso do Fabricante