Описание
QNAP discovered a number of command injection vulnerabilities found in Music Station versions 4.8.6 (for QTS 4.2.x), 5.0.7 (for QTS 4.3.x), and earlier. If exploited, these vulnerabilities may allow a remote attacker to run arbitrary commands on the NAS.
Ссылки
- Vendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 4.8.6 (включая)Версия до 5.0.7 (включая)
Одно из
cpe:2.3:a:qnap:music_station:*:*:*:*:*:*:*:*
cpe:2.3:a:qnap:music_station:*:*:*:*:*:*:*:*
EPSS
Процентиль: 90%
0.0573
Низкий
9.8 Critical
CVSS3
7.5 High
CVSS2
Дефекты
CWE-77
Связанные уязвимости
CVSS3: 9.8
github
больше 3 лет назад
QNAP discovered a number of command injection vulnerabilities found in Music Station versions 4.8.6 (for QTS 4.2.x), 5.0.7 (for QTS 4.3.x), and earlier. If exploited, these vulnerabilities may allow a remote attacker to run arbitrary commands on the NAS.
EPSS
Процентиль: 90%
0.0573
Низкий
9.8 Critical
CVSS3
7.5 High
CVSS2
Дефекты
CWE-77