Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-3849-c8qc-jg4v

Опубликовано: 06 сент. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 7.2

Описание

An OS command injection vulnerability has been reported to affect legacy QTS. If exploited, the vulnerability could allow authenticated administrators to execute commands via a network.

We have already fixed the vulnerability in the following versions: QTS 4.3.6.2805 build 20240619 and later QTS 4.3.4.2814 build 20240618 and later QTS 4.3.3.2784 build 20240619 and later QTS 4.2.6 build 20240618 and later

An OS command injection vulnerability has been reported to affect legacy QTS. If exploited, the vulnerability could allow authenticated administrators to execute commands via a network.

We have already fixed the vulnerability in the following versions: QTS 4.3.6.2805 build 20240619 and later QTS 4.3.4.2814 build 20240618 and later QTS 4.3.3.2784 build 20240619 and later QTS 4.2.6 build 20240618 and later

EPSS

Процентиль: 42%
0.00204
Низкий

7.2 High

CVSS3

Дефекты

CWE-78

Связанные уязвимости

CVSS3: 7.2
nvd
больше 1 года назад

An OS command injection vulnerability has been reported to affect legacy QTS. If exploited, the vulnerability could allow authenticated administrators to execute commands via a network. We have already fixed the vulnerability in the following versions: QTS 4.3.6.2805 build 20240619 and later QTS 4.3.4.2814 build 20240618 and later QTS 4.3.3.2784 build 20240619 and later QTS 4.2.6 build 20240618 and later

CVSS3: 7.2
fstec
больше 2 лет назад

Уязвимость операционной системы QTS сетевых устройств Qnap, связанная с недостатками контроля доступа, позволяющая нарушителю выполнить произвольный код в системе

EPSS

Процентиль: 42%
0.00204
Низкий

7.2 High

CVSS3

Дефекты

CWE-78