CVE-2017-13067: Undefined Security Weakness

QNAP has patched a remote code execution vulnerability affecting the QTS Media Library in all versions prior to QTS 4.2.6 build 20170905 and QTS 4.3.3.0299 build 20170901. This particular vulnerability allows a remote attacker to execute commands on a QNAP NAS using a transcoding service on port...

QNAP QTS Multiple Arbitrary Command Execution Vulnerabilities (Aug 2017) - Active Check

QNAP QTS is prone to multiple vulnerabilities. This VT was deprecated since it is a duplicate of QNAP QTS 4.2.4 Build 20170313 Multiple Vulnerabilities - Active Check OID: 1.3.6.1.4.1.25623.1.0.140238 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a...

QNAP QTS < 4.2.6 build 20170729, 4.3.x < 4.3.3 build 20170727 Multiple Vulnerabilities

QNAP QTS is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:qnap:qts"; ifdescription...

QNAP QTS Command Injection Vulnerability (NAS-201707-12)

QNAP QTS is prone to a command injection vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:qnap:qts"; ifdescription...

CVE-2017-7629

QNAP QTS before 4.2.6 build 20170517 has a flaw in the change password function...

CVE-2017-7876

This command injection vulnerability in QTS allows attackers to run arbitrary commands in the compromised application. QNAP have already fixed the issue in QTS 4.2.6 build 20170517, QTS 4.3.3.0174 build 20170503 and later versions...

Default credentials

QNAP QTS before 4.2.6 build 20170517 has a flaw in the change password function...

Command injection

This command injection vulnerability in QTS allows attackers to run arbitrary commands in the compromised application. QNAP have already fixed the issue in QTS 4.2.6 build 20170517, QTS 4.3.3.0174 build 20170503 and later versions...

CVE-2017-7876

This command injection vulnerability in QTS allows attackers to run arbitrary commands in the compromised application. QNAP have already fixed the issue in QTS 4.2.6 build 20170517, QTS 4.3.3.0174 build 20170503 and later versions...

EUVD-2017-16851

This command injection vulnerability in QTS allows attackers to run arbitrary commands in the compromised application. QNAP have already fixed the issue in QTS 4.2.6 build 20170517, QTS 4.3.3.0174 build 20170503 and later versions...

CVE-2017-7629

QNAP QTS before 4.2.6 build 20170517 has a flaw in the change password function...

CVE-2017-7876

This command injection vulnerability in QTS allows attackers to run arbitrary commands in the compromised application. QNAP have already fixed the issue in QTS 4.2.6 build 20170517, QTS 4.3.3.0174 build 20170503 and later versions...

CVE-2017-7629

CVE-2017-7629 affects QNAP QTS pre-4.2.6 build 20170517, due to a flaw in the change password function. The vulnerability’s impact is partial integrity loss (I:P) with no confidentiality/availability impact per CVSS data, and a network-accessible, low-complexity path without required authenticati...

CVE-2017-7876

A command injection vulnerability exists in the QNAP QTS operating system due to a lack of sufficient measures for cleaning input data . This flaw allows a remote attacker to execute arbitrary commands within the compromised application. QNAP has released fixes for this issue in QTS 4.2.6 build 2...

PT-2017-17857

Name of the Vulnerable Software and Affected Versions QNAP QTS versions prior to 4.2.6 build 20170517 Description The issue is related to a flaw in the change password function. Recommendations For versions prior to 4.2.6 build 20170517, update to version 4.2.6 build 20170517 or later to resolve...

PT-2017-2324

Name of the Vulnerable Software and Affected Versions QTS versions prior to 4.2.6 build 20170517 QTS versions prior to 4.3.3.0174 build 20170503 Description The issue is related to a lack of input sanitization in the QTS operating system, allowing for command injection. This can enable a remote...

CVE-2017-7629: Weak Password Recovery Mechanism for Forgotten Password

QNAP QTS before 4.2.6 build 20170517 has a flaw in the change password function...

CVE-2017-7876: Improper Neutralization of Special Elements used in a Command

This command injection vulnerability in QTS allows attackers to run arbitrary commands in the compromised application. QNAP have already fixed the issue in QTS 4.2.6 build 20170517, QTS 4.3.3.0174 build 20170503 and later versions...

QNAP TVS-663 QTS < 4.2.4 build 20170313 - Command Injection Vulnerability

Exploit for hardware platform in category web applications QNAP QTS multiple RCE vulnerabilities ===================================== The latest version of this advisory is available at: https://sintonen.fi/advisories/qnap-qts-multiple-rce-vulnerabilities.txt Overview -------- QNAP QTS firmware...

QNAP TVS-663 QTS 4.2.4 build 20170313 - Command Injection

QNAP TVS-663 QTS 4.2.4 build 20170313 - Command Injection QNAP QTS multiple RCE vulnerabilities ===================================== The latest version of this advisory is available at: https://sintonen.fi/advisories/qnap-qts-multiple-rce-vulnerabilities.txt Overview -------- QNAP QTS firmware...