CVE-2018-19950

2020-11-0215:57:02

CWE-78

CWE-77

qnap

www.cve.org

cve-2018-19950

remote attackers

execute arbitrary commands

qnap systems inc.

EPSS

0.003

Percentile

65.9%

JSON

If exploited, this command injection vulnerability could allow remote attackers to execute arbitrary commands. This issue affects: QNAP Systems Inc. Music Station versions prior to 5.1.13; versions prior to 5.2.9; versions prior to 5.3.11.

CNA Affected

[
  {
    "product": "Music Station",
    "vendor": "QNAP Systems Inc.",
    "versions": [
      {
        "lessThan": "5.1.13",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThan": "5.2.9",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThan": "5.3.11",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

References

www.qnap.com/en/security-advisory/qsa-20-10

EPSS

0.003

Percentile

65.9%

JSON

Related for CVELIST:CVE-2018-19950