Design/Logic Flaw

2013-06-0720:55:00

PRIOn knowledge base

www.prio-n.com

7.9 High

AI Score

Confidence

Low

0.055 Low

EPSS

Percentile

93.2%

JSON

cgi-bin/pingping.cgi on QNAP VioStor NVR devices with firmware 4.0.3, and in the Surveillance Station Pro component in QNAP NAS, allows remote authenticated users to execute arbitrary commands by leveraging guest access and placing shell metacharacters in the query string.

CPENameOperatorVersion
viostor_network_video_recordereq4.0.3

CPE	Name	Operator	Version
	viostor_network_video_recorder	eq	4.0.3

References

www.kb.cert.org/vuls/id/927644