CVE-2021-34351

CVE-2021-34351 is a command-injection vulnerability in QNAP QVR . It arises from insufficient input validation in the QVR component, allowing a remote attacker to execute arbitrary commands over the network. The issue affects QVR prior to the fixed release, with a fix provided in QVR 5.1.5 build ...

CVE-2021-34351 Command Injection Vulnerability in QVR

A command injection vulnerability has been reported to affect QNAP device running QVR. If exploited, this vulnerability could allow remote attackers to run arbitrary commands. We have already fixed this vulnerability in the following versions of QVR: QVR 5.1.5 build 20210803 and later...