← CVE Intelligence

CVE-2018-0712

QNAP / LDAP Server in QTS PUBLISHED

Description (CNA)

Command injection vulnerability in LDAP Server in QNAP QTS 4.2.6 build 20171208, QTS 4.3.3 build 20180402, QTS 4.3.4 build 20180413 and their earlier versions could allow remote attackers to run arbitrary commands or install malware on the NAS.

Affected (CNA)

Vendor / productVersions
QNAP / LDAP Server in QTSaffected LDAP Server in QTS 4.2.6 build 20171208, QTS 4.3.3 build 20180402, QTS 4.3.4 build 20180413 and their earlier versions

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.