CVE-2017-7640

2018-03-0814:00:00

qnap

www.cve.org

AI Score

9.7

Confidence

High

EPSS

0.005

Percentile

76.2%

JSON

QNAP NAS application Media Streaming add-on version 421.1.0.2, 430.1.2.0, and earlier allows remote attackers to run arbitrary OS commands against the system with root privileges.

CNA Affected

[
  {
    "product": "QNAP Media Streaming Add-On",
    "vendor": "QNAP",
    "versions": [
      {
        "status": "affected",
        "version": "421.1.0.2, 430.1.2.0, and earlier"
      }
    ]
  }
]

References

www.qnap.com/zh-tw/security-advisory/nas-201803-08