Lucene search

CVE-2020-36195

🗓️ 17 Apr 2021 04:11:15Reported by qnapType

cve🔗 web.nvd.nist.gov📰️ 18 Media mentions👁 146 Views

CVE-2020-36195 SQL injection vulnerability in QNAP NAS Multimedia Console/Media Streaming add-o

Reporter	Title	Published	Views	Family All 7
Tenable Nessus	Qnap QTS SQL Injection (CVE-2020-36195)	16 Oct 202400:00	–	nessus
AttackerKB	CVE-2020-36195	16 Apr 202100:00	–	attackerkb
Cvelist	CVE-2020-36195 SQL Injection Vulnerability in Multimedia Console and the Media Streaming Add-On	17 Apr 202103:50	–	cvelist
Prion	Sql injection	17 Apr 202104:15	–	prion
NVD	CVE-2020-36195	17 Apr 202104:15	–	nvd
OpenVAS	QNAP QTS SQL Injection Vulnerability (QSA-21-11)	19 Apr 202100:00	–	openvas
The Hacker News	New QNAP NAS Flaws Exploited In Recent Ransomware Attacks - Patch It!	23 Apr 202114:43	–	thn

Nvd

Node

qnap qtsRange<4.3.3

qnap qtsRange4.3.4–4.3.6

qnap qtsMatch4.3.3

qnap qtsMatch4.3.3.0095

qnap qtsMatch4.3.3.0096

qnap qtsMatch4.3.3.0136

qnap qtsMatch4.3.3.0154

qnap qtsMatch4.3.3.0174

qnap qtsMatch4.3.3.0188

qnap qtsMatch4.3.3.0210

qnap qtsMatch4.3.3.0229

qnap qtsMatch4.3.3.0238

qnap qtsMatch4.3.3.0262

qnap qtsMatch4.3.3.0299

qnap qtsMatch4.3.3.0351

qnap qtsMatch4.3.3.0353

qnap qtsMatch4.3.3.0361

qnap qtsMatch4.3.3.0369

qnap qtsMatch4.3.3.0378

qnap qtsMatch4.3.3.0396

qnap qtsMatch4.3.3.0404

qnap qtsMatch4.3.3.0416

qnap qtsMatch4.3.3.0418

qnap qtsMatch4.3.3.0448

qnap qtsMatch4.3.3.0514

qnap qtsMatch4.3.3.0546

qnap qtsMatch4.3.3.0570

qnap qtsMatch4.3.3.0868

qnap qtsMatch4.3.3.0998

qnap qtsMatch4.3.3.1051

qnap qtsMatch4.3.3.1098

qnap qtsMatch4.3.3.1161

qnap qtsMatch4.3.3.1252

qnap qtsMatch4.3.3.1315

qnap qtsMatch4.3.3.1386

qnap qtsMatch4.3.3.1432

qnap qtsMatch4.3.6-

qnap qtsMatch4.3.6.0895

qnap qtsMatch4.3.6.0907

qnap qtsMatch4.3.6.0923

qnap qtsMatch4.3.6.0944

qnap qtsMatch4.3.6.0959

qnap qtsMatch4.3.6.0979

qnap qtsMatch4.3.6.0993

qnap qtsMatch4.3.6.1013

qnap qtsMatch4.3.6.1033

qnap qtsMatch4.3.6.1070

qnap qtsMatch4.3.6.1154

qnap qtsMatch4.3.6.1218

qnap qtsMatch4.3.6.1263

qnap qtsMatch4.3.6.1286

qnap qtsMatch4.3.6.1333

qnap qtsMatch4.3.6.1411

qnap qtsMatch4.3.6.1446

Node

qnap media_streaming_add-onRange<430.1.8.10

AND

qnap qtsMatch4.3.3

Node

qnap media_streaming_add-onRange<430.1.8.8

AND

qnap qtsMatch4.3.6

Node

qnap multimedia_consoleRange<1.3.4

AND

qnap qtsRange4.4.0≥

[
  {
    "product": "QTS",
    "vendor": "QNAP Systems Inc.",
    "versions": [
      {
        "lessThan": "4.3.3.1624 Build 20210416",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThan": "4.3.6.1620 Build 20210322",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Media Streaming add-on",
    "vendor": "QNAP Systems Inc.",
    "versions": [
      {
        "lessThan": "430.1.8.10",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThan": "430.1.8.8",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Multimedia Console",
    "vendor": "QNAP Systems Inc.",
    "versions": [
      {
        "lessThan": "1.3.4",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
qnap	www.qnap.com/en/security-advisory/qsa-21-11

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

17 Apr 2021 04:15Current

9.7High risk

Vulners AI Score9.7

CVSS27.5

CVSS39.8

EPSS0.00119

cve-2020-36195 sql injection qnap nas multimedia console media streaming vulnerability remote exploit application information security update