PT-2021-4716 · Qnap · Qusbcam2

Crixer · Published 2021-09-10 · Updated 2022-02-10 · CVE-2021-34344

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions QUSBCam2 versions prior to 1.1.4 QUSBCam2 versions prior to 2.0.1

Description A stack buffer overflow issue has been reported to affect QNAP devices running QUSBCam2, allowing attackers to execute arbitrary code if exploited.

Recommendations For QUSBCam2 versions prior to 1.1.4, update to QUSBCam2 1.1.4 or later. For QUSBCam2 versions prior to 2.0.1, update to QUSBCam2 2.0.1 or later.

Fix

Buffer Overflow

Memory Corruption

Weakness Enumeration

CWE-120

CWE-787

Related Identifiers

BDU:2021-05421

CVE-2021-34344

Affected Products

Qusbcam2

References · 6

• https://bdu.fstec.ru/vul/2021-05421 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-34344 · Security Note
• https://osv.dev/vulnerability/CVE-2021-34344 · Vendor Advisory
• https://qnap.com/en/security-advisory/qsa-21-34 · Vendor Advisory
• https://cybersecurity-help.cz/vdb/SB2021090916 · Note
• https://t.me/cvenotify/21367 · Telegram Post