Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-7q2m-5cgc-3v5r

Опубликовано: 19 дек. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 5.5

Описание

A command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to execute arbitrary commands.

We have already fixed the vulnerability in the following versions: QuFirewall 2.3.3 ( 2023/03/27 ) and later and later

A command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to execute arbitrary commands.

We have already fixed the vulnerability in the following versions: QuFirewall 2.3.3 ( 2023/03/27 ) and later and later

EPSS

Процентиль: 32%
0.00124
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-77
CWE-78

Связанные уязвимости

CVSS3: 5.5
nvd
около 1 года назад

A command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to execute arbitrary commands. We have already fixed the vulnerability in the following versions: QuFirewall 2.3.3 ( 2023/03/27 ) and later and later

CVSS3: 5.5
fstec
больше 2 лет назад

Уязвимость встроенного межсетевого экрана QuFirewall для защиты данных на устройствах NAS QNAP, связанная с непринятием мер по чистке данных на управляющем уровне, позволяющая нарушителю выполнять произвольные команды

EPSS

Процентиль: 32%
0.00124
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-77
CWE-78