CVE-2021-44051

🗓️ 05 May 2022 16:50:20Reported by qnapType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 110 Views

Command injection vulnerability in QNAP NAS with QuTScloud, QuTS hero and QTS. Fixed in QuTScloud c5.0.1.1949+, QuTS hero h5.0.0.1986+ build 20220324+, QTS 5.0.0.1986+ build 20220324

Reporter	Title	Published	Views	Family All 14
BDU FSTEC	The vulnerability of the QTS operating system, specifically the QuTS Hero operating system, arises from the lack of measures taken to neutralize special elements used in the command line of the operating system. This allows attackers to compromise the confidentiality, integrity, and accessibility of information.	8 Jul 202200:00	–	bdu_fstec
CNNVD	QNAP Systems 多款产品命令注入漏洞	5 May 202200:00	–	cnnvd
Cvelist	CVE-2021-44051 Command injection	5 May 202216:50	–	cvelist
EUVD	EUVD-2021-30910	3 Oct 202520:07	–	euvd
NCSC	Vulnerabilities fixed in QNAP QTS, QuTS hero and QuTScloud	6 May 202200:00	–	ncsc
NVD	CVE-2021-44051	5 May 202217:15	–	nvd
OpenVAS	QNAP QTS Multiple Vulnerabilities (QSA-22-16)	6 May 202200:00	–	openvas
OpenVAS	QNAP QuTS hero Multiple Vulnerabilities (QSA-22-16)	30 May 202200:00	–	openvas
OpenVAS	QNAP QuTScloud Multiple Vulnerabilities (QSA-22-16)	30 May 202200:00	–	openvas
OSV	CVE-2021-44051	5 May 202217:15	–	osv

NVD

Node

qnap qtsRange5.0.0.1716–5.0.0.1986

qnap qtsRange4.3.3.0174–4.3.3.1945

qnap qtsRange4.3.4.0899–4.3.4.1976

qnap qtsRange4.3.6.0895–4.3.6.1965

qnap qtsRange4.4.0.0883–4.5.4.1991

qnap qtsMatch4.2.6build_20170517

qnap qtsMatch4.2.6build_20190322

qnap qtsMatch4.2.6build_20190730

qnap qtsMatch4.2.6build_20190921

qnap qtsMatch4.2.6build_20191107

qnap qtsMatch4.2.6build_20200109

qnap qtsMatch4.2.6build_20200421

qnap qtsMatch4.2.6build_20200611

qnap qtsMatch4.2.6build_20200821

qnap qtsMatch4.2.6build_20210327

qnap qtsMatch4.2.6build_20211215

qnap quts_heroRange<h4.5.4.1771

qnap quts_heroRangeh5.0.0.1772–h5.0.0.1986

qnap qutscloudRange<c5.0.1.1998

[
  {
    "product": "QuTScloud",
    "vendor": "QNAP Systems Inc.",
    "versions": [
      {
        "lessThan": "c5.0.1.1949",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "QuTS hero",
    "vendor": "QNAP Systems Inc.",
    "versions": [
      {
        "lessThan": "h5.0.0.1986 build 20220324",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "QTS",
    "vendor": "QNAP Systems Inc.",
    "versions": [
      {
        "lessThan": "5.0.0.1986 build 20220324",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]