← CVE Intelligence

CVE-2017-13067

QNAP / QTS Media Libary PRODUCT PUBLISHED

Description (CNA)

QNAP has patched a remote code execution vulnerability affecting the QTS Media Library in all versions prior to QTS 4.2.6 build 20170905 and QTS 4.3.3.0299 build 20170901. This particular vulnerability allows a remote attacker to execute commands on a QNAP NAS using a transcoding service on port 9251. A remote user does not require any privileges to successfully execute an attack.

Affected (CNA)

Vendor / productVersions
QNAP / QTS Media Libary PRODUCTaffected prior to 4.2.6 build 20170905; affected prior to 4.3.3.0299 build 20170901

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.