← CVE Intelligence

CVE-2018-14746

QNAP / QNAP QTS PUBLISHED

Description (CNA)

Command Injection vulnerability in QTS 4.3.5 build 20181013, QTS 4.3.4 build 20181008, QTS 4.3.3 build 20180829, QTS 4.2.6 build 20180829 and earlier versions could allow remote attackers to run arbitrary commands on the NAS.

Affected (CNA)

Vendor / productVersions
QNAP / QNAP QTSaffected QTS 4.3.5 build 20181013, QTS 4.3.4 build 20181008, QTS 4.3.3 build 20180829, QTS 4.2.6 build 20180829 and earlier versions

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.