PT-2018-9038 · Qnap Systems · Qts

Yuki · Publicado 2018-11-27 · Atualizado 2020-01-16 · CVE-2018-0721

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions QNAP Systems Inc. QTS versions 4.2.6 and prior on build 20180711 QNAP Systems Inc. QTS versions 4.3.3 and prior on build 20180725 QNAP Systems Inc. QTS versions 4.3.4 and prior on build 20180710

Description A Buffer Overflow issue in QTS allows attackers to run arbitrary code.

Recommendations For QTS version 4.2.6 and prior on build 20180711, update to a version later than 4.2.6. For QTS version 4.3.3 and prior on build 20180725, update to a version later than 4.3.3. For QTS version 4.3.4 and prior on build 20180710, update to a version later than 4.3.4.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

CWE-120

Identificadores relacionados

CVE-2018-0721

Produtos afetados

Qts

Referências · 3

• https://qnap.com/zh-tw/security-advisory/nas-201809-20 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-0721 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-0721 · Aviso do Fabricante