Lucene search

[email protected]NVD:CVE-2019-7193

HistoryDec 05, 2019 - 5:15 p.m.

CVE-2019-7193

2019-12-0517:15:13

CWE-20

[email protected]

web.nvd.nist.gov

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.6

Confidence

High

EPSS

0.952

Percentile

99.4%

JSON

This improper input validation vulnerability allows remote attackers to inject arbitrary code to the system. To fix the vulnerability, QNAP recommend updating QTS to their latest versions.

Affected configurations

Nvd

Node

qnapqtsMatch4.3.6.0895

qnapqtsMatch4.3.6.0907

qnapqtsMatch4.3.6.0923

qnapqtsMatch4.3.6.0944

qnapqtsMatch4.3.6.0959

qnapqtsMatch4.3.6.0979

qnapqtsMatch4.3.6.0993

qnapqtsMatch4.3.6.1013

qnapqtsMatch4.3.6.1033

qnapqtsMatch4.4.1.0948beta

qnapqtsMatch4.4.1.0949beta

qnapqtsMatch4.4.1.0978beta_2

qnapqtsMatch4.4.1.0998beta_3

qnapqtsMatch4.4.1.0999beta_3

qnapqtsMatch4.4.1.1031beta_4

qnapqtsMatch4.4.1.1033beta_4

VendorProductVersionCPE
qnapqts4.3.6.0895cpe:2.3:o:qnap:qts:4.3.6.0895:*:*:*:*:*:*:*
qnapqts4.3.6.0907cpe:2.3:o:qnap:qts:4.3.6.0907:*:*:*:*:*:*:*
qnapqts4.3.6.0923cpe:2.3:o:qnap:qts:4.3.6.0923:*:*:*:*:*:*:*
qnapqts4.3.6.0944cpe:2.3:o:qnap:qts:4.3.6.0944:*:*:*:*:*:*:*
qnapqts4.3.6.0959cpe:2.3:o:qnap:qts:4.3.6.0959:*:*:*:*:*:*:*
qnapqts4.3.6.0979cpe:2.3:o:qnap:qts:4.3.6.0979:*:*:*:*:*:*:*
qnapqts4.3.6.0993cpe:2.3:o:qnap:qts:4.3.6.0993:*:*:*:*:*:*:*
qnapqts4.3.6.1013cpe:2.3:o:qnap:qts:4.3.6.1013:*:*:*:*:*:*:*
qnapqts4.3.6.1033cpe:2.3:o:qnap:qts:4.3.6.1033:*:*:*:*:*:*:*
qnapqts4.4.1.0948cpe:2.3:o:qnap:qts:4.4.1.0948:beta:*:*:*:*:*:*

Vendor	Product	Version	CPE
qnap	qts	4.3.6.0895	cpe:2.3:o:qnap:qts:4.3.6.0895:::::::*
qnap	qts	4.3.6.0907	cpe:2.3:o:qnap:qts:4.3.6.0907:::::::*
qnap	qts	4.3.6.0923	cpe:2.3:o:qnap:qts:4.3.6.0923:::::::*
qnap	qts	4.3.6.0944	cpe:2.3:o:qnap:qts:4.3.6.0944:::::::*
qnap	qts	4.3.6.0959	cpe:2.3:o:qnap:qts:4.3.6.0959:::::::*
qnap	qts	4.3.6.0979	cpe:2.3:o:qnap:qts:4.3.6.0979:::::::*
qnap	qts	4.3.6.0993	cpe:2.3:o:qnap:qts:4.3.6.0993:::::::*
qnap	qts	4.3.6.1013	cpe:2.3:o:qnap:qts:4.3.6.1013:::::::*
qnap	qts	4.3.6.1033	cpe:2.3:o:qnap:qts:4.3.6.1033:::::::*
qnap	qts	4.4.1.0948	cpe:2.3:o:qnap:qts:4.4.1.0948:beta::::::