Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-hp68-q6cw-rc79

Опубликовано: 06 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 8.8

Описание

A command injection vulnerability has been reported to affect QNAP NAS running QuTScloud, QuTS hero and QTS. If exploited, this vulnerability allows remote attackers to run arbitrary commands. We have already fixed this vulnerability in the following versions of QuTScloud, QuTS hero and QTS: QuTScloud c5.0.1.1949 and later QuTS hero h5.0.0.1986 build 20220324 and later QTS 5.0.0.1986 build 20220324 and later

A command injection vulnerability has been reported to affect QNAP NAS running QuTScloud, QuTS hero and QTS. If exploited, this vulnerability allows remote attackers to run arbitrary commands. We have already fixed this vulnerability in the following versions of QuTScloud, QuTS hero and QTS: QuTScloud c5.0.1.1949 and later QuTS hero h5.0.0.1986 build 20220324 and later QTS 5.0.0.1986 build 20220324 and later

EPSS

Процентиль: 78%
0.01155
Низкий

8.8 High

CVSS3

Дефекты

CWE-77

Связанные уязвимости

CVSS3: 8.8
nvd
почти 4 года назад

A command injection vulnerability has been reported to affect QNAP NAS running QuTScloud, QuTS hero and QTS. If exploited, this vulnerability allows remote attackers to run arbitrary commands. We have already fixed this vulnerability in the following versions of QuTScloud, QuTS hero and QTS: QuTScloud c5.0.1.1949 and later QuTS hero h5.0.0.1986 build 20220324 and later QTS 5.0.0.1986 build 20220324 and later

CVSS3: 8.8
fstec
почти 4 года назад

Уязвимость операционной системы QTS, операционной системы QuTS hero , связанная с непринятием мер по нейтрализации специальных элементов используемых в команде ОС, позволяющая нарушителю оказать воздействие на конфиденциальность целостность доступность информации

EPSS

Процентиль: 78%
0.01155
Низкий

8.8 High

CVSS3

Дефекты

CWE-77