QuRouter OS Command Injection

The vulnerability of the QuRouter operating system for QNAP network devices is related to the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

CVE-2024-48861

An OS command injection vulnerability has been reported to affect several product versions. If exploited, the vulnerability could allow local network attackers to execute commands. We have already fixed the vulnerability in the following versions: QuRouter 2.4.4.106 and later...

CVE-2024-48860

An OS command injection vulnerability has been reported to affect several product versions. If exploited, the vulnerability could allow remote attackers to execute commands. We have already fixed the vulnerability in the following version: QuRouter 2.4.3.103 and later...

CVE-2024-48860

An OS command injection vulnerability has been reported to affect several product versions. If exploited, the vulnerability could allow remote attackers to execute commands. We have already fixed the vulnerability in the following version: QuRouter 2.4.3.103 and later...

CVE-2024-48861

An OS command injection vulnerability has been reported to affect several product versions. If exploited, the vulnerability could allow local network attackers to execute commands. We have already fixed the vulnerability in the following versions: QuRouter 2.4.4.106 and later...

CVE-2024-48860 QHora

An OS command injection vulnerability has been reported to affect several product versions. If exploited, the vulnerability could allow remote attackers to execute commands. We have already fixed the vulnerability in the following version: QuRouter 2.4.3.103 and later...

CVE-2024-48860

CVE-2024-48860 is an OS command injection vulnerability in QuRouter. Affected software: QuRouter versions prior to 2.4.3.103. Root cause reported: OS command injection that could allow remote attackers to execute commands. Impact as per reports: high severity with network attack vector and no use...

CVE-2024-48860 QHora

An OS command injection vulnerability has been reported to affect several product versions. If exploited, the vulnerability could allow remote attackers to execute commands. We have already fixed the vulnerability in the following version: QuRouter 2.4.3.103 and later...

CVE-2024-48861 QHora

An OS command injection vulnerability has been reported to affect several product versions. If exploited, the vulnerability could allow local network attackers to execute commands. We have already fixed the vulnerability in the following versions: QuRouter 2.4.4.106 and later...

CVE-2024-48861

CVE-2024-48861 describes an OS command injection affecting QuRouter. Affected versions are QuRouter prior to 2.4.4.106. The vulnerability allows a local network attacker to execute commands through the affected component, with a high impact on confidentiality, integrity, and availability per CVSS...

CVE-2024-48861 QHora

An OS command injection vulnerability has been reported to affect several product versions. If exploited, the vulnerability could allow local network attackers to execute commands. We have already fixed the vulnerability in the following versions: QuRouter 2.4.4.106 and later...

CVE-2024-48860: Improper Neutralization of Special Elements used in a Command

An OS command injection vulnerability has been reported to affect several product versions. If exploited, the vulnerability could allow remote attackers to execute commands. We have already fixed the vulnerability in the following version: QuRouter 2.4.3.103 and later...

CVE-2024-48861: Improper Neutralization of Special Elements used in a Command

An OS command injection vulnerability has been reported to affect several product versions. If exploited, the vulnerability could allow local network attackers to execute commands. We have already fixed the vulnerability in the following versions: QuRouter 2.4.4.106 and later...

PT-2024-8777 · Qurouter · Qurouter

Name of the Vulnerable Software and Affected Versions: QuRouter versions prior to 2.4.3.103 Description: An OS command injection vulnerability has been reported, which could allow remote attackers to execute commands if exploited. Over 2,500 services are potentially affected. The issue is related...

PT-2024-33249 · Qurouter · Qurouter

Name of the Vulnerable Software and Affected Versions: QuRouter versions prior to 2.4.4.106 Description: An OS command injection issue has been reported, potentially allowing local network attackers to execute commands if exploited. Recommendations: For QuRouter versions prior to 2.4.4.106, updat...

QNAP Systems QuRouter command injection vulnerability

QNAP Systems QuRouter is a router management system from China Weilian Technology QNAP Systems. A command injection vulnerability exists in QNAP Systems QuRouter prior to version 2.4.4.106, which stems from the inclusion of an operating system command injection vulnerability...

QNAP Systems QuRouter security vulnerabilities

QNAP Systems QuRouter is a router management system from China Weilian Technology QNAP Systems. A security vulnerability exists in QNAP Systems QuRouter prior to version 2.4.3.103, which stems from the inclusion of an operating system command injection vulnerability...

QuRouter OS Code Execution

The vulnerability of the QuRouter operating system for QNAP network devices is related to errors in processing input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

PT-2024-7609 · Qurouter · Qurouter

Name of the Vulnerable Software and Affected Versions: QuRouter versions prior to 2.4.5.032 Description: A SQL injection vulnerability has been reported to affect QuRouter, allowing remote attackers to inject malicious code if exploited. The vulnerability is related to errors in processing input...