PT-2017-11441 · Qnap · Qnap Nas

Published 2017-09-19 · Updated 2019-10-03 · CVE-2017-10700

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions QNAP NAS version 4.3.3.0229

Description A remote attacker can execute arbitrary system commands as the root user of the NAS application in the medialibrary component.

Recommendations For QNAP NAS version 4.3.3.0229, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2017-10700

Affected Products

Qnap Nas

References · 4

• https://qnap.com/en/support/con_show.php?cid=128 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-10700 · Security Note
• https://osv.dev/vulnerability/CVE-2017-10700 · Vendor Advisory
• https://lateralsecurity.com/downloads/Lateral_Security-Advisory-QNAP_QTS_CVE-2017-10700.pdf · Note