Lucene search

[email protected]CVE-2019-7183

HistoryDec 05, 2019 - 5:15 p.m.

CVE-2019-7183

2019-12-0517:15:00

CWE-59

[email protected]

web.nvd.nist.gov

cve

2019

7183

vulnerability

qnap

update

qts

nvd

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

6.9 Medium

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.012 Low

EPSS

Percentile

85.1%

JSON

This improper link resolution vulnerability allows remote attackers to access system files. To fix this vulnerability, QNAP recommend updating QTS to their latest versions.

CPENameOperatorVersion
qnap:qtsqnap qtseq4.2.6
qnap:qtsqnap qtseq4.4.1.1033
qnap:qtsqnap qtseq4.4.1.1031
qnap:qtsqnap qtseq4.4.1.0999
qnap:qtsqnap qtseq4.4.1.0998
qnap:qtsqnap qtseq4.4.1.0978
qnap:qtsqnap qtseq4.4.1.0949
qnap:qtsqnap qtseq4.4.1.0948
qnap:qtsqnap qtseq4.3.6.1033
qnap:qtsqnap qtseq4.3.6.1013

CPE	Name	Operator	Version
qnap:qts	qnap qts	eq	4.2.6
qnap:qts	qnap qts	eq	4.4.1.1033
qnap:qts	qnap qts	eq	4.4.1.1031
qnap:qts	qnap qts	eq	4.4.1.0999
qnap:qts	qnap qts	eq	4.4.1.0998
qnap:qts	qnap qts	eq	4.4.1.0978
qnap:qts	qnap qts	eq	4.4.1.0949
qnap:qts	qnap qts	eq	4.4.1.0948
qnap:qts	qnap qts	eq	4.3.6.1033
qnap:qts	qnap qts	eq	4.3.6.1013

Rows per page:

1-10 of 251

References

www.qnap.com/zh-tw/security-advisory/nas-201911-27

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

6.9 Medium

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.012 Low

EPSS

Percentile

85.1%

JSON

Related for CVE-2019-7183

prion1 openvas1