Qnap QTS OS Command Injection (CVE-2017-6360)

QNAP QTS before 4.2.4 Build 20170313 allows attackers to gain administrator privileges and obtain sensitive information via unspecified vectors. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, In...

QNAP QTS Multiple Arbitrary Command Execution Vulnerabilities (Aug 2017) - Active Check

QNAP QTS is prone to multiple vulnerabilities. This VT was deprecated since it is a duplicate of QNAP QTS 4.2.4 Build 20170313 Multiple Vulnerabilities - Active Check OID: 1.3.6.1.4.1.25623.1.0.140238 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a...

CVE-2017-6360

creationtimestamp| type| source ---|---|--- 2017-04-07 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/41842 2025-10-31 21:02:35+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m4jerlay552l...

QNAP TVS-663 QTS < 4.2.4 build 20170313 - Command Injection Vulnerability

Exploit for hardware platform in category web applications QNAP QTS multiple RCE vulnerabilities ===================================== The latest version of this advisory is available at: https://sintonen.fi/advisories/qnap-qts-multiple-rce-vulnerabilities.txt Overview -------- QNAP QTS firmware...

QNAP TVS-663 QTS < 4.2.4 build 20170313 - Command Injection

QNAP QTS multiple RCE vulnerabilities ===================================== The latest version of this advisory is available at: https://sintonen.fi/advisories/qnap-qts-multiple-rce-vulnerabilities.txt Overview -------- QNAP QTS firmware contains multiple Command Injection CWE-77 vulnerabilities...

QNAP TVS-663 QTS 4.2.4 build 20170313 - Command Injection

QNAP TVS-663 QTS 4.2.4 build 20170313 - Command Injection QNAP QTS multiple RCE vulnerabilities ===================================== The latest version of this advisory is available at: https://sintonen.fi/advisories/qnap-qts-multiple-rce-vulnerabilities.txt Overview -------- QNAP QTS firmware...

QNAP QTS Remote Command Injection

QNAP QTS multiple RCE vulnerabilities ===================================== The latest version of this advisory is available at: https://sintonen.fi/advisories/qnap-qts-multiple-rce-vulnerabilities.txt Overview -------- QNAP QTS firmware contains multiple Command Injection CWE-77 vulnerabilities...

CVE-2017-6360

QNAP QTS (before version 4.2.4 Build 20170313) is vulnerable to OS Command Injection (CWE-77) within the web user interface CGI binaries. Specifically, the /cgi-bin/userConfig.cgi binary executes a command via popen() where the hash HTTP request GET parameter is improperly handled. An authenticat...