Description (CNA)
This improper input validation vulnerability allows remote attackers to inject arbitrary code to the system. To fix the vulnerability, QNAP recommend updating QTS to their latest versions.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / QNAP NAS devices | affected QTS 4.4.0 - QTS 4.4.1: before build 20190918, QTS 4.3.6: before build 20190919 |
CWE
No CWE identifiers supplied.
References
- https://www.qnap.com/zh-tw/security-advisory/nas-201911-25
- http://packetstormsecurity.com/files/157857/QNAP-QTS-And-Photo-Station-6.0.3-Remote-Command-Execution.html
ADP enrichment
No English description supplied.
No English description supplied.