Описание
A command injection vulnerability has been reported to affect certain versions of Malware Remover. If exploited, this vulnerability allows remote attackers to execute arbitrary commands. This issue affects: QNAP Systems Inc. Malware Remover versions prior to 4.6.1.0. This issue does not affect: QNAP Systems Inc. Malware Remover 3.x.
Ссылки
- PatchThird Party AdvisoryVDB Entry
- Vendor Advisory
- Third Party AdvisoryVDB Entry
- PatchThird Party AdvisoryVDB Entry
- Vendor Advisory
- Third Party AdvisoryVDB Entry
Уязвимые конфигурации
EPSS
6.7 Medium
CVSS3
7.2 High
CVSS2
Дефекты
Связанные уязвимости
A command injection vulnerability has been reported to affect certain versions of Malware Remover. If exploited, this vulnerability allows remote attackers to execute arbitrary commands. This issue affects: QNAP Systems Inc. Malware Remover versions prior to 4.6.1.0. This issue does not affect: QNAP Systems Inc. Malware Remover 3.x.
Уязвимость средства удаления вредоносных программ Malware Remover, связанная с неправильной нейтрализацией специальных элементов на управляющем уровне, позволяющая нарушителю выполнить произвольные команды и повысить свои привилегии
EPSS
6.7 Medium
CVSS3
7.2 High
CVSS2