Qnap QTS Exposure of Sensitive Information to an Unauthorized Actor (CVE-2017-7630)

QNAP QTS 4.2.6 build 20171026, QTS 4.3.3 build 20170727 and earlier allows remote attackers to obtain potentially sensitive information firmware version and running services via a request to sysinfoReq.cgi. This plugin only works with Tenable.ot. Please visit...

CVE-2017-7630

QNAP QTS 4.2.6 build 20171026, QTS 4.3.3 build 20170727 and earlier allows remote attackers to obtain potentially sensitive information firmware version and running services via a request to sysinfoReq.cgi...

CVE-2017-7630

CVE-2017-7630 affects QNAP QTS 4.2.6 (build 20171026) and QTS 4.3.3 (build 20170727) and earlier. The vulnerability allows remote attackers to disclose potentially sensitive information by requesting sysinfoReq.cgi, specifically firmware version and running services. The connected sources confirm...