PT-2019-8708 · Qnap · Qts+1

Yoni Ramon · Publicado 2019-02-01 · Atualizado 2019-02-12 · CVE-2018-0722

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions QTS versions prior to 4.3.4 with Photo Station versions prior to 5.7.2 QTS version 4.3.3 with Photo Station versions prior to 5.4.4 QTS version 4.2.6 with Photo Station versions prior to 5.2.8

Description The issue allows remote attackers to access sensitive information on the device due to a Path Traversal vulnerability in Photo Station.

Recommendations For QTS versions prior to 4.3.4 with Photo Station versions prior to 5.7.2, update Photo Station to version 5.7.2 or later. For QTS version 4.3.3 with Photo Station versions prior to 5.4.4, update Photo Station to version 5.4.4 or later. For QTS version 4.2.6 with Photo Station versions prior to 5.2.8, update Photo Station to version 5.2.8 or later.

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2018-0722

Produtos afetados

Photo Station

Qts

Referências · 3

• https://osv.dev/vulnerability/CVE-2018-0722 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-0722 · Nota de Segurança
• https://qnap.com/zh-tw/security-advisory/nas-201901-14 · Aviso do Fabricante