CVE-2017-6361

QNAP QTS firmware versions before 4.2.4 Build 20170313 are vulnerable to a Command Injection (CWE-77) flaw in the web user interface CGI binaries. Specifically, the authLogin.cgi component is susceptible because the reboot_notice_msg HTTP request GET parameter is passed directly to system() calls...

CVE-2017-6359

QNAP QTS before 4.2.4 Build 20170313 allows attackers to gain administrator privileges and execute arbitrary commands via unspecified vectors...

PT-2017-1609

Name of the Vulnerable Software and Affected Versions QNAP QTS versions prior to 4.2.4 Build 20170313 Description The issue is related to the lack of input data sanitization in the QTS operating system. This allows a remote attacker to execute arbitrary commands and gain administrator privileges...

CVE-2017-6361: Improper Neutralization of Special Elements used in an OS Command

QNAP QTS before 4.2.4 Build 20170313 allows attackers to execute arbitrary commands via unspecified vectors...

CVE-2017-6360: Improper Neutralization of Special Elements used in an OS Command

QNAP QTS before 4.2.4 Build 20170313 allows attackers to gain administrator privileges and obtain sensitive information via unspecified vectors...

CVE-2017-6359: Improper Neutralization of Special Elements used in an OS Command

QNAP QTS before 4.2.4 Build 20170313 allows attackers to gain administrator privileges and execute arbitrary commands via unspecified vectors...

CVE-2017-5227: Exposure of Sensitive Information to an Unauthorized Actor

QNAP QTS before 4.2.4 Build 20170313 allows local users to obtain sensitive Domain Administrator password information by reading data in an XOR format within the /etc/config/uLinux.conf configuration file...

PT-2017-1607

Name of the Vulnerable Software and Affected Versions QNAP QTS versions prior to 4.2.4 Build 20170313 Description The issue is related to the lack of input data sanitization in the QTS operating system. This allows a remote attacker to execute arbitrary commands via unspecified vectors...

PT-2017-16402

Name of the Vulnerable Software and Affected Versions QNAP QTS versions prior to 4.2.4 Build 20170313 Description The issue allows local users to obtain sensitive Domain Administrator password information by reading data in an XOR format within the /etc/config/uLinux.conf configuration file...

PT-2017-1608

Name of the Vulnerable Software and Affected Versions QNAP QTS versions prior to 4.2.4 Build 20170313 Description The issue is related to the lack of input data sanitization in the QTS operating system. This allows a remote attacker to gain administrator privileges and obtain sensitive informatio...

QNAP QTS < 4.2.3 build 20170213 Multiple Vulnerabilities

QNAP QTS is prone to multiple vulnerabilities SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:qnap:qts"; if description...

QNAP QTS 4.2.x XSS / Command Injection / Transport Issues

QNAP QTS 4.2.x multiple vulnerabilities ======================================= The latest version of this advisory is available at: https://sintonen.fi/advisories/qnap-qts-42-multiple-vulnerabilities.txt Overview -------- QNAP QTS firmware contain Missing Transport Layer Security CWE-319, Improp...

QNAP NVRNAS Devices - Buffer Overflow (PoC)

QNAP NVRNAS Devices - Buffer Overflow PoC Device Model: QNAP VioStor NVR, QNAP NAS, Fujitsu Celvin NAS May be additional re-branded Attack Vector: Remote Attack Models: 1. Classic Heap Overflows 2. Classic Stack Overflow 3. Heap Feng Shui Overflow 4. "Heack Combo" Heap / Stack Combination Overflo...

QNAP QTS 'qname' Parameter XSS Vulnerability

QNAP QTS is prone to a cross-site scripting XSS vulnerability. Copyright C 2016 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software...

QNAP QTS 4.2.0 Build 20160311 / Build 20160601 Cross Site Scripting

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory ID: SYSS-2016-049 Product: QNAP QTS Manufacturer: QNAP Affected Versions: 4.2.0 Build 20160311 and Build 20160601 Tested Versions: 4.2.0 Build 20160311 - 4.2.2 Build 20160812 Vulnerability Type: Persistent Cross-Site Scripting CWE-79 Risk...

QNAP QTS 4.2.1 Build 20160601 Cross Site Scripting

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 dvisory ID: SYSS-2016-051 Product: QNAP QTS Manufacturer: QNAP Affected Versions: 4.2.1 Build 20160601 Tested Versions: 4.2.1 Build 20160601 - 4.2.2 Build 20160812 Vulnerability Type: Reflected Cross-Site Scripting CWE-79 Risk Level: Medium Solution...

QNAP QTS 4.2.1 Build 20160601 Command Injection

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory ID: SYSS-2016-055 Product: QNAP QTS Manufacturer: QNAP Affected Versions: 4.2.1 Build 20160601 Tested Versions: 4.2.1 Build 20160601 - 4.2.2 Build 20160812 Vulnerability Type: OS Command Injection CWE-78 Risk Level: High Solution Status:...

QNAP QTS 4.2.0 Build 20160311 / Build 20160601 Cross Site Scripting

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory ID: SYSS-2016-050 Product: QNAP QTS Manufacturer: QNAP Affected Versions: 4.2.0 Build 20160311 and Build 20160601 Tested Versions: 4.2.0 Build 20160311 - 4.2.2 Build 20160812 Vulnerability Type: Persistent Cross-Site Scripting CWE-79 Risk...

QNAP QTS 4.2.1 Build 20160601 Lang Parameter Command Injection

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory ID: SYSS-2016-054 Product: QNAP QTS Manufacturer: QNAP Affected Versions: 4.2.1 Build 20160601 Tested Versions: 4.2.1 Build 20160601 - 4.2.2 Build 20160812 Vulnerability Type: OS Command Injection CWE-78 Risk Level: High Solution Status:...

QNAP QTS 4.2.1 Build 20160601 Arbitrary File Overwrite

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory ID: SYSS-2016-053 Product: QNAP QTS Manufacturer: QNAP Affected Versions: 4.2.1 Build 20160601 Tested Versions: 4.2.1 Build 20160601 - 4.2.2 Build 20160812 Vulnerability Type: Arbitrary file overwrite CWE-23 Risk Level: High Solution Status...