CVE-2017-5227

QNAP QTS before 4.2.4 Build 20170313 allows local users to obtain sensitive Domain Administrator password information by reading data in an XOR format within the /etc/config/uLinux.conf configuration file...

CVE-2017-6360

QNAP QTS before 4.2.4 Build 20170313 allows attackers to gain administrator privileges and obtain sensitive information via unspecified vectors...

CVE-2017-6361

QNAP QTS before 4.2.4 Build 20170313 allows attackers to execute arbitrary commands via unspecified vectors...

CVE-2017-6359

QNAP QTS before 4.2.4 Build 20170313 allows attackers to gain administrator privileges and execute arbitrary commands via unspecified vectors...

CVE-2017-5227

CVE-2017-5227 affects QNAP QTS prior to 4.2.4 Build 20170313. Local (non‑remote) users can read data stored in XOR format inside /etc/config/uLinux.conf to obtain sensitive Domain Administrator password information. The available connected documents consistently describe the same effect and targe...

CVE-2017-6359

CVE-2017-6359 affects QNAP QTS prior to 4.2.4 Build 20170313. The QTS web UI CGI binaries permit unauthenticated command injection, enabling an attacker to gain administrator/root privileges and execute arbitrary commands via unspecified vectors. Public references include Exploit-DB (exploit 4184...

CVE-2017-6360

QNAP QTS (before version 4.2.4 Build 20170313) is vulnerable to OS Command Injection (CWE-77) within the web user interface CGI binaries. Specifically, the /cgi-bin/userConfig.cgi binary executes a command via popen() where the hash HTTP request GET parameter is improperly handled. An authenticat...

CVE-2017-6361

QNAP QTS firmware versions before 4.2.4 Build 20170313 are vulnerable to a Command Injection (CWE-77) flaw in the web user interface CGI binaries. Specifically, the authLogin.cgi component is susceptible because the reboot_notice_msg HTTP request GET parameter is passed directly to system() calls...

PT-2017-1609

Name of the Vulnerable Software and Affected Versions QNAP QTS versions prior to 4.2.4 Build 20170313 Description The issue is related to the lack of input data sanitization in the QTS operating system. This allows a remote attacker to execute arbitrary commands and gain administrator privileges...

QNAP QTS Privilege Escalation / Information Disclosure

QNAP QTS Domain Privilege Escalation Vulnerability Name Sensitive Data Exposure in QNAP QTS Systems Affected QNAP QTS NAS all model and all versions 4.2.4 Severity High 7.9/10 Impact CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L Vendor http://www.qnap.com/ Advisory...

CVE-2017-6361: Improper Neutralization of Special Elements used in an OS Command

QNAP QTS before 4.2.4 Build 20170313 allows attackers to execute arbitrary commands via unspecified vectors...

PT-2017-1608

Name of the Vulnerable Software and Affected Versions QNAP QTS versions prior to 4.2.4 Build 20170313 Description The issue is related to the lack of input data sanitization in the QTS operating system. This allows a remote attacker to gain administrator privileges and obtain sensitive informatio...

PT-2017-1607

Name of the Vulnerable Software and Affected Versions QNAP QTS versions prior to 4.2.4 Build 20170313 Description The issue is related to the lack of input data sanitization in the QTS operating system. This allows a remote attacker to execute arbitrary commands via unspecified vectors...

PT-2017-16402

Name of the Vulnerable Software and Affected Versions QNAP QTS versions prior to 4.2.4 Build 20170313 Description The issue allows local users to obtain sensitive Domain Administrator password information by reading data in an XOR format within the /etc/config/uLinux.conf configuration file...

CVE-2017-6360: Improper Neutralization of Special Elements used in an OS Command

QNAP QTS before 4.2.4 Build 20170313 allows attackers to gain administrator privileges and obtain sensitive information via unspecified vectors...

CVE-2017-6359: Improper Neutralization of Special Elements used in an OS Command

QNAP QTS before 4.2.4 Build 20170313 allows attackers to gain administrator privileges and execute arbitrary commands via unspecified vectors...

CVE-2017-5227: Exposure of Sensitive Information to an Unauthorized Actor

QNAP QTS before 4.2.4 Build 20170313 allows local users to obtain sensitive Domain Administrator password information by reading data in an XOR format within the /etc/config/uLinux.conf configuration file...

QNAP QTS < 4.2.3 build 20170213 Multiple Vulnerabilities

QNAP QTS is prone to multiple vulnerabilities SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:qnap:qts"; if description...

QNAP QTS Command Injection Vulnerability

QNAP QTS is a Turbo NAS operating system from QNAP Systems. The system provides file storage, management, backup, multimedia applications and security monitoring. A command injection vulnerability exists in QNAP QTS version 4.2.x, which can be exploited to conduct a man-in-the-middle attack durin...

QNAP QTS 4.2.x XSS / Command Injection / Transport Issues

QNAP QTS 4.2.x multiple vulnerabilities ======================================= The latest version of this advisory is available at: https://sintonen.fi/advisories/qnap-qts-42-multiple-vulnerabilities.txt Overview -------- QNAP QTS firmware contain Missing Transport Layer Security CWE-319, Improp...