Описание
A command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to execute arbitrary commands.
We have already fixed the vulnerability in the following versions: QuFirewall 2.3.3 ( 2023/03/27 ) and later and later
Ссылки
- Vendor Advisory
Уязвимые конфигурации
EPSS
5.5 Medium
CVSS3
7.2 High
CVSS3
Дефекты
Связанные уязвимости
A command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to execute arbitrary commands. We have already fixed the vulnerability in the following versions: QuFirewall 2.3.3 ( 2023/03/27 ) and later and later
Уязвимость встроенного межсетевого экрана QuFirewall для защиты данных на устройствах NAS QNAP, связанная с непринятием мер по чистке данных на управляющем уровне, позволяющая нарушителю выполнять произвольные команды
EPSS
5.5 Medium
CVSS3
7.2 High
CVSS3