PT-2018-12704 · Qnap · Qts

Published 2018-11-28 · Updated 2018-12-27 · CVE-2018-14749

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions QTS versions 4.3.5 build 20181013 through 4.2.6 build 20180829 and earlier

Description A Buffer Overflow issue has been identified, which could have an unspecified impact on the NAS.

Recommendations For QTS versions 4.3.5 build 20181013 through 4.2.6 build 20180829 and earlier, at the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2018-14749

Affected Products

Qts

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2018-14749 · Security Note
• https://osv.dev/vulnerability/CVE-2018-14749 · Vendor Advisory
• https://qnap.com/zh-tw/security-advisory/nas-201811-22 · Vendor Advisory