CVE-2018-0718

2018-09-1400:00:00

qnap

www.cve.org

9.8 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

68.2%

JSON

Command injection vulnerability in Music Station 5.1.2 and earlier versions in QNAP QTS 4.3.3 and 4.3.4 could allow remote attackers to run arbitrary commands in the compromised application.

CNA Affected

[
  {
    "product": "Music Station",
    "vendor": "QNAP",
    "versions": [
      {
        "status": "affected",
        "version": "5.1.2 and earlier versions in QTS 4.3.3 and 4.3.4"
      }
    ]
  }
]

References

www.qnap.com/zh-tw/security-advisory/nas-201809-14