Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-vw76-r5h7-p4w9

Опубликовано: 22 сент. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 8.8

Описание

An OS command injection vulnerability has been reported to affect QNAP operating systems. If exploited, the vulnerability allows remote authenticated users to execute commands via susceptible QNAP devices.

We have already fixed the vulnerability in the following versions: QTS 5.0.1.2376 build 20230421 and later QTS 4.5.4.2374 build 20230416 and later QuTS hero h5.0.1.2376 build 20230421 and later QuTS hero h4.5.4.2374 build 20230417 and later QuTScloud c5.0.1.2374 and later

An OS command injection vulnerability has been reported to affect QNAP operating systems. If exploited, the vulnerability allows remote authenticated users to execute commands via susceptible QNAP devices.

We have already fixed the vulnerability in the following versions: QTS 5.0.1.2376 build 20230421 and later QTS 4.5.4.2374 build 20230416 and later QuTS hero h5.0.1.2376 build 20230421 and later QuTS hero h4.5.4.2374 build 20230417 and later QuTScloud c5.0.1.2374 and later

EPSS

Процентиль: 62%
0.00433
Низкий

8.8 High

CVSS3

Дефекты

CWE-78

Связанные уязвимости

CVSS3: 8.8
nvd
больше 2 лет назад

An OS command injection vulnerability has been reported to affect QNAP operating systems. If exploited, the vulnerability allows remote authenticated users to execute commands via susceptible QNAP devices. We have already fixed the vulnerability in the following versions: QTS 5.0.1.2376 build 20230421 and later QTS 4.5.4.2374 build 20230416 and later QuTS hero h5.0.1.2376 build 20230421 and later QuTS hero h4.5.4.2374 build 20230417 and later QuTScloud c5.0.1.2374 and later

CVSS3: 8.8
fstec
больше 2 лет назад

Уязвимость операционных систем QuTS hero, QTS, QuTScloud сетевых устройств Qnap, связанная с возможностью внедрения команд, позволяющая нарушителю выполнять произвольные команды

EPSS

Процентиль: 62%
0.00433
Низкий

8.8 High

CVSS3

Дефекты

CWE-78