PT-2020-5927 · Qnap · Qnap Qts
Published
2020-11-29
·
Updated
2020-11-29
CVSS v2.0
10
High
| Vector | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions:
QNAP QTS (affected versions not specified)
Description:
The issue is related to the implementation of the myupnpmediasvr DLNA server process in QNAP QTS operating systems for network storage devices. It involves insufficient protection of service data when processing UPNP requests. This could allow a remote attacker to write arbitrary files or execute arbitrary commands by connecting through port 8200.
Recommendations:
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Information Disclosure
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Qnap Qts