CVE-2021-34346

Опубликовано: 10 сент. 2021

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Низкий

Описание

A stack buffer overflow vulnerability has been reported to affect QNAP device running NVR Storage Expansion. If exploited, this vulnerability allows attackers to execute arbitrary code. We have already fixed this vulnerability in the following versions of NVR Storage Expansion: NVR Storage Expansion 1.0.6 ( 2021/08/03 ) and later

Ссылки

https://www.qnap.com/en/security-advisory/qsa-21-36
Vendor Advisory
https://www.qnap.com/en/security-advisory/qsa-21-36
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:qnap:nvr_storage_expansion_firmware:*:*:*:*:*:*:*:*

Версия до 1.0.6 (исключая)

cpe:2.3:h:qnap:nvr_storage_expansion:-:*:*:*:*:*:*:*

EPSS

Процентиль: 72%

0.00723

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-787

Связанные уязвимости

GHSA-w8h2-jg46-g9xc

github

больше 3 лет назад