CVSS 7.2 · High EPSS 1,2%
Kerentanan Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') pada qnap qts, qnap quts hero +1 lainnya. Skor CVSS 3.1 7.2 (High) menurut NVD.
An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute commands via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.5.2645 build 20240116 and later QuTS hero h5.1.5.2647 build 20240118 and later QuTScloud c5.1.5.2651 and later
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
· uraikan di kalkulator | Vendor | Produk | Versi terdampak |
|---|---|---|
| qnap | qts | Versi 5.1.0.2348 build_20230325 |
| qnap | qts | Versi 5.1.0.2399 build_20230515 |
| qnap | qts | Versi 5.1.0.2418 build_20230603 |
| qnap | qts | Versi 5.1.0.2444 build_20230629 |
| qnap | qts | Versi 5.1.0.2466 build_20230721 |
| qnap | qts | Versi 5.1.1.2491 build_20230815 |
| qnap | qts | Versi 5.1.2.2533 build_20230926 |
| qnap | qts | Versi 5.1.3.2578 build_20231110 |
| qnap | qts | Versi 5.1.4.2596 build_20231128 |
| qnap | qts | Versi 5.1.5.2645 |
| qnap | quts hero | Versi h5.1.0.2409 build_20230525 |
| qnap | quts hero | Versi h5.1.0.2424 build_20230609 |
| qnap | quts hero | Versi h5.1.0.2453 build_20230708 |
| qnap | quts hero | Versi h5.1.0.2466 build_20230721 |
| qnap | quts hero | Versi h5.1.1.2488 build_20230812 |
| qnap | quts hero | Versi h5.1.2.2534 build_20230927 |
| qnap | quts hero | Versi h5.1.3.2578 build_20231110 |
| qnap | quts hero | Versi h5.1.4.2596 build_20231128 |
| qnap | quts hero | Versi h5.1.5.2647 |
| qnap | qutscloud | Versi c5.1.0.2498 build_20230822 |