PT-2018-9032 · Qnap · Qnap Qts

Publicado 2018-06-21 · Atualizado 2019-10-03 · CVE-2018-0712

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions QNAP QTS versions prior to 4.3.4 build 20180413

Description A command injection issue in the LDAP Server of QNAP QTS could allow remote attackers to execute arbitrary commands or install malware on the NAS.

Recommendations For QNAP QTS versions prior to 4.3.4 build 20180413, update to a version newer than 4.3.4 build 20180413 to resolve the issue.

Correção

Command Injection

Enumeração de Fraquezas

CWE-77

Identificadores relacionados

CVE-2018-0712

Produtos afetados

Qnap Qts

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2018-0712 · Nota de Segurança
• http://securitytracker.com/id/1041141 · Nota
• https://qnap.com/zh-tw/security-advisory/nas-201806-19 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2018-0712 · Aviso do Fabricante