Command injection

2019-12-0417:16:00

PRIOn knowledge base

www.prio-n.com

9.8 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

69.5%

JSON

This command injection vulnerability in File Station allows attackers to execute commands on the affected device. To fix the vulnerability, QNAP recommend updating QTS to their latest versions.

CPENameOperatorVersion
qtseq4.2.6
qtseq4.4.1.1033 beta-4
qtseq4.4.1.1031 beta-4
qtseq4.4.1.999 beta-3
qtseq4.4.1.998 beta-3
qtseq4.4.1.978 beta-2
qtseq4.4.1.949 beta
qtseq4.4.1.948 beta
qtseq4.3.6.1033
qtseq4.3.6.1013

Name	Operator	Version
qts	eq	4.2.6
qts	eq	4.4.1.1033 beta-4
qts	eq	4.4.1.1031 beta-4
qts	eq	4.4.1.999 beta-3
qts	eq	4.4.1.998 beta-3
qts	eq	4.4.1.978 beta-2
qts	eq	4.4.1.949 beta
qts	eq	4.4.1.948 beta
qts	eq	4.3.6.1033
qts	eq	4.3.6.1013

Rows per page:

1-10 of 251

References

www.qnap.com/zh-tw/security-advisory/nas-201911-20