Описание
Command injection vulnerability in Music Station 5.1.2 and earlier versions in QNAP QTS 4.3.3 and 4.3.4 could allow remote attackers to run arbitrary commands in the compromised application.
Ссылки
- Vendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 5.1.2 (включая)
Одновременно
cpe:2.3:a:qnap:music_station:*:*:*:*:*:*:*:*
Одно из
cpe:2.3:o:qnap:qts:4.3.3:*:*:*:*:*:*:*
cpe:2.3:o:qnap:qts:4.3.4:*:*:*:*:*:*:*
EPSS
Процентиль: 90%
0.06016
Низкий
9.8 Critical
CVSS3
7.5 High
CVSS2
Дефекты
CWE-77
Связанные уязвимости
CVSS3: 9.8
github
больше 3 лет назад
Command injection vulnerability in Music Station 5.1.2 and earlier versions in QNAP QTS 4.3.3 and 4.3.4 could allow remote attackers to run arbitrary commands in the compromised application.
EPSS
Процентиль: 90%
0.06016
Низкий
9.8 Critical
CVSS3
7.5 High
CVSS2
Дефекты
CWE-77