CVE-2017-17029

Опубликовано: 21 дек. 2017

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Низкий

Описание

A buffer overflow vulnerability in login function in QNAP QTS version 4.2.6 build 20171026, 4.3.3.0378 build 20171117, 4.3.4.0387 (Beta 2) build 20171116 and earlier could allow remote attackers to execute arbitrary code on NAS devices.

Ссылки

http://www.securitytracker.com/id/1040018
Third Party Advisory
VDB Entry
https://www.qnap.com/zh-tw/security-advisory/nas-201712-15
Issue Tracking
Vendor Advisory
http://www.securitytracker.com/id/1040018
Third Party Advisory
VDB Entry
https://www.qnap.com/zh-tw/security-advisory/nas-201712-15
Issue Tracking
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:qnap:qts:*:*:*:*:*:*:*:*

Версия до 4.3.3.0378 (включая)

cpe:2.3:o:qnap:qts:4.3.4.0358:beta1:*:*:*:*:*:*

cpe:2.3:o:qnap:qts:4.3.4.0370:beta1:*:*:*:*:*:*

cpe:2.3:o:qnap:qts:4.3.4.0372:beta1:*:*:*:*:*:*

cpe:2.3:o:qnap:qts:4.3.4.0374:beta1:*:*:*:*:*:*

cpe:2.3:o:qnap:qts:4.3.4.0387:beta2:*:*:*:*:*:*

EPSS

Процентиль: 87%

0.03236

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-119

Связанные уязвимости

GHSA-4xgj-rhhc-3x82