PT-2018-8412 · Qnap · Qnap Qfinder Pro

Tony Martin · Published 2018-03-05 · Updated 2018-03-29 · CVE-2017-7633

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions QNAP Qfinder Pro versions 6.1.0.0317 and earlier

Description The issue may expose sensitive information contained in NAS devices, potentially allowing attackers to further compromise the device.

Recommendations For QNAP Qfinder Pro versions 6.1.0.0317 and earlier, update to a version later than 6.1.0.0317 to resolve the issue.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2017-7633

Affected Products

Qnap Qfinder Pro

References · 3

• https://osv.dev/vulnerability/CVE-2017-7633 · Vendor Advisory
• https://qnap.com/zh-tw/security-advisory/nas-201802-27 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-7633 · Security Note