CVE-2021-34344

🗓️ 10 Sep 2021 04:00:24Reported by qnapType

CVE-2021-34344 QNAP QUSBCam2 stack buffer overflow vulnerability allows arbitrary code execution. Fixed in QTS 4.5.4: QUSBCam2 1.1.4 ( 2021/07/30 ) and later, QTS 5.0: QUSBCam2 2.0.1 ( 2021/08/03 ) and later, QTS 4.3.6: QUSBCam2 1.1.4 ( 2021/07/30 ) and later, QTS 4.3.3: QUSBCam2 1.1.4 ( 2021/08/06 ) and later, QuTS hero 4.5.3: QUSBCam2 1.1.4 ( 2021/07/30 ) and late

Reporter	Title	Published	Views	Family All 7
CNNVD	QNAP NAS 缓冲区错误漏洞	9 Sep 202100:00	–	cnnvd
Cvelist	CVE-2021-34344 Stack Buffer Overflow Vulnerability in QUSBCam2	10 Sep 202104:00	–	cvelist
EUVD	EUVD-2021-21004	7 Oct 202500:30	–	euvd
NCSC	Vulnerabilities fixed in QNAP nas	15 Sep 202100:00	–	ncsc
NVD	CVE-2021-34344	10 Sep 202104:15	–	nvd
OSV	CVE-2021-34344	10 Sep 202104:15	–	osv
Prion	Stack overflow	10 Sep 202104:15	–	prion

NVD

Node

qnap qusbcam2Range<1.1.4

AND

qnap qtsMatch4.3.6

qnap qtsMatch4.5.4

qnap quts_heroMatchh4.5.3

[
  {
    "platforms": [
      "QTS 4.5.4"
    ],
    "product": "QUSBCam2",
    "vendor": "QNAP Systems Inc.",
    "versions": [
      {
        "lessThan": "1.1.4 ( 2021/07/30 )",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "platforms": [
      "QTS 5.0"
    ],
    "product": "QUSBCam2",
    "vendor": "QNAP Systems Inc.",
    "versions": [
      {
        "lessThan": "2.0.1 ( 2021/08/03 )",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "platforms": [
      "QTS 4.3.6"
    ],
    "product": "QUSBCam2",
    "vendor": "QNAP Systems Inc.",
    "versions": [
      {
        "lessThan": "1.1.4 ( 2021/07/30 )",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "platforms": [
      "QTS 4.3.3"
    ],
    "product": "QUSBCam2",
    "vendor": "QNAP Systems Inc.",
    "versions": [
      {
        "lessThan": "1.1.4 ( 2021/08/06 )",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "platforms": [
      "QuTS hero 4.5.3"
    ],
    "product": "QUSBCam2",
    "vendor": "QNAP Systems Inc.",
    "versions": [
      {
        "lessThan": "1.1.4 ( 2021/07/30 )",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
qnap	www.qnap.com/en/security-advisory/qsa-21-34

21 Nov 2024 06:10Current

10High risk

Vulners AI Score10

CVSS 27.5

CVSS 3.19.8

EPSS0.00546

CWE-787