Command injection

2022-05-0517:15:00

PRIOn knowledge base

www.prio-n.com

8.8 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

54.9%

JSON

A command injection vulnerability has been reported to affect QNAP NAS running QuTScloud, QuTS hero and QTS. If exploited, this vulnerability allows remote attackers to run arbitrary commands. We have already fixed this vulnerability in the following versions of QuTScloud, QuTS hero and QTS: QuTScloud c5.0.1.1949 and later QuTS hero h5.0.0.1986 build 20220324 and later QTS 5.0.0.1986 build 20220324 and later

CPENameOperatorVersion
qtseq4.2.6 build-20170517
qtseq4.2.6 build-20190322
qtseq4.2.6 build-20190730
qtseq4.2.6 build-20190921
qtseq4.2.6 build-20191107
qtseq4.2.6 build-20200109
qtseq4.2.6 build-20200421
qtseq4.2.6 build-20200611
qtseq4.2.6 build-20200821
qtsge5.0.0.1716

Name	Operator	Version
qts	eq	4.2.6 build-20170517
qts	eq	4.2.6 build-20190322
qts	eq	4.2.6 build-20190730
qts	eq	4.2.6 build-20190921
qts	eq	4.2.6 build-20191107
qts	eq	4.2.6 build-20200109
qts	eq	4.2.6 build-20200421
qts	eq	4.2.6 build-20200611
qts	eq	4.2.6 build-20200821
qts	ge	5.0.0.1716