Design/Logic Flaw

2018-06-0521:29:00

PRIOn knowledge base

www.prio-n.com

9.5 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

75.0%

QNAP NAS application Proxy Server through version 1.2.0 allows remote attackers to run arbitrary OS commands against the system with root privileges.

CPENameOperatorVersion
nas_proxy_serverlt1.3.0

CPE	Name	Operator	Version
	nas_proxy_server	lt	1.3.0

References

www.securitytracker.com/id/1041025

www.qnap.com/en/security-advisory/nas-201806-01