CVSS 8.8 · High EPSS 0,97%
Kerentanan Improper Neutralization of Special Elements used in a Command ('Command Injection') pada qnap qts, qnap quts hero. Skor CVSS 3.1 8.8 (High) menurut NVD.
A command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained user access to execute arbitrary commands. We have already fixed the vulnerability in the following versions: QTS 5.2.4.3079 build 20250321 and later QuTS hero h5.2.4.3079 build 20250321 and later
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
· uraikan di kalkulator | Vendor | Produk | Versi terdampak |
|---|---|---|
| qnap | qts | Versi 5.2.0.2737 build_20240417 |
| qnap | qts | Versi 5.2.0.2744 build_20240424 |
| qnap | qts | Versi 5.2.0.2782 build_20240601 |
| qnap | qts | Versi 5.2.0.2802 build_20240620 |
| qnap | qts | Versi 5.2.0.2823 build_20240711 |
| qnap | qts | Versi 5.2.0.2851 build_20240808 |
| qnap | qts | Versi 5.2.0.2860 build_20240817 |
| qnap | qts | Versi 5.2.1.2930 build_20241025 |
| qnap | qts | Versi 5.2.2.2950 build_20241114 |
| qnap | qts | Versi 5.2.3.3006 build_20250108 |
| qnap | qts | Versi 5.2.4.3070 build_20250312 |
| qnap | quts hero | Versi h5.2.0.2737 build_20240417 |
| qnap | quts hero | Versi h5.2.0.2782 build_20240601 |
| qnap | quts hero | Versi h5.2.0.2789 build_20240607 |
| qnap | quts hero | Versi h5.2.0.2802 build_20240620 |
| qnap | quts hero | Versi h5.2.0.2823 build_20240711 |
| qnap | quts hero | Versi h5.2.0.2851 build_20240808 |
| qnap | quts hero | Versi h5.2.0.2860 build_20240817 |
| qnap | quts hero | Versi h5.2.1.2929 build_20241025 |
| qnap | quts hero | Versi h5.2.1.2940 build_20241105 |
| qnap | quts hero | Versi h5.2.2.2952 build_20241116 |
| qnap | quts hero | Versi h5.2.3.3006 build_20250108 |
| qnap | quts hero | Versi h5.2.4.3070 build_20250312 |