Qnap QTS Command Injection (CVE-2020-2509)

A command injection vulnerability has been reported to affect QTS and QuTS hero. If exploited, this vulnerability allows attackers to execute arbitrary commands in a compromised application. We have already fixed this vulnerability in the following versions: QTS 4.5.2.1566 Build 20210202 and late...

QNAP QTS / QuTS hero Command Injection (QSA-21-05)

The version of QNAP QTS or QuTS hero on the remote host is affected by a command injection vulnerability. If exploited, this vulnerability allows attackers to execute arbitrary commands in a compromised application. Note that Nessus has not tested for this issue but has instead relied only on the...

VulnCheck KEV: CVE-2020-2509

QNAP NAS devices contain a command injection vulnerability which could allow attackers to perform remote code execution...

QNAP QTS Command Injection Vulnerability (QSA-21-05)

QNAP QTS is prone to a command injection vulnerability. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:qnap:qts"; ifdescription...

CVE-2020-2509 Command Injection Vulnerability in QTS and QuTS hero

A command injection vulnerability has been reported to affect QTS and QuTS hero. If exploited, this vulnerability allows attackers to execute arbitrary commands in a compromised application. We have already fixed this vulnerability in the following versions: QTS 4.5.2.1566 Build 20210202 and late...

CVE-2020-2509

CVE-2020-2509 is a remote command injection affecting QNAP QTS and QuTS hero. The vulnerability could allow an attacker to execute arbitrary commands within a vulnerable application. According to multiple sources, patches are available in the following releases: QTS 4.5.2.1566 Build 20210202 and ...

CVE-2020-2509 Command Injection Vulnerability in QTS and QuTS hero

A command injection vulnerability has been reported to affect QTS and QuTS hero. If exploited, this vulnerability allows attackers to execute arbitrary commands in a compromised application. We have already fixed this vulnerability in the following versions: QTS 4.5.2.1566 Build 20210202 and late...

CVE-2020-2509

A command injection vulnerability has been reported to affect QTS and QuTS hero. If exploited, this vulnerability allows attackers to execute arbitrary commands in a compromised application. We have already fixed this vulnerability in the following versions: QTS 4.5.2.1566 Build 20210202 and late...

QNAP QTS < 4.3.6.1620 Build 20210322 Multiple Vulnerabilities

This VT has been deprecated and replaced by the VT SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2020-2509

creationtimestamp| type| source ---|---|--- 2021-04-03 04:19:58+00:00| seen| https://t.me/cKure/4647 2022-12-24 16:06:16+00:00| published-proof-of-concept| https://t.me/dilagrafie/2172 2022-12-24 16:06:16+00:00| published-proof-of-concept| https://t.me/dilagrafie/232 2023-06-14 21:10:04+00:00|...