CVE-2018-0729

🗓️ 04 Dec 2019 16:33:08Reported by qnapType

Command injection vulnerability in Music Station allows attackers to execute commands on affected devices. QNAP recommends updating to latest versions.

Reporter	Title	Published	Views	Family All 6
Cvelist	CVE-2018-0729	4 Dec 201916:33	–	cvelist
EUVD	EUVD-2018-1539	7 Oct 202500:30	–	euvd
NVD	CVE-2018-0729	4 Dec 201917:16	–	nvd
OpenVAS	QNAP QTS Music Station RCE Vulnerability (NAS-201911-20)	5 Dec 201900:00	–	openvas
Prion	Command injection	4 Dec 201917:16	–	prion
RedhatCVE	CVE-2018-0729	22 May 202507:19	–	redhatcve

NVD

Node

qnap music_stationRange<5.3.5

AND

qnap qtsMatch4.4.1

Node

qnap music_stationRange<5.2.7

AND

qnap qtsMatch4.3.6

Node

qnap music_stationRange<5.1.11

AND

qnap qtsMatch4.3.4

Node

qnap music_stationRange<5.1.11

AND

qnap qtsMatch4.3.3

Node

qnap music_stationRange<4.8.8

AND

qnap qtsMatch4.2.6

[
  {
    "product": "QNAP NAS devices",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "QTS 4.4.1: Music Station before version 5.3.5, QTS 4.3.6: Music Station before version 5.2.7, QTS 4.3.4: Music Station before version 5.1.11, QTS 4.3.3: Music Station before version 5.1.11, QTS 4.2.6: Music Station before version 4.8.8"
      }
    ]
  }
]

Source	Link
qnap	www.qnap.com/zh-tw/security-advisory/nas-201911-20

21 Nov 2024 03:38Current

9.8High risk

Vulners AI Score9.8

CVSS 27.5

CVSS 3.19.8

EPSS0.03544

CWE-77