SUSE CVE-2017-13069

QNAP discovered a number of command injection vulnerabilities found in Music Station versions 4.8.6 for QTS 4.2.x, 5.0.7 for QTS 4.3.x, and earlier. If exploited, these vulnerabilities may allow a remote attacker to run arbitrary commands on the NAS...

CVE-2017-13069

CVE-2017-13069 concerns a command-injection vulnerability in QNAP Music Station. Affected are Music Station in QTS 4.2.x (version 4.8.6) and QTS 4.3.x (version 5.0.7) and earlier. If exploited, a remote attacker could execute arbitrary commands on the NAS. Documented CVSS metrics indicate a netwo...