← CVE Intelligence

CVE-2020-25847

Command Injection Vulnerability in QTS and QuTS hero PUBLISHED

Description (CNA)

This command injection vulnerability allows attackers to execute arbitrary commands in a compromised application. QNAP have already fixed this vulnerability in the following versions of QTS and QuTS hero.

Affected (CNA)

Vendor / productVersions
QNAP Systems Inc. / QTSaffected unspecified before 4.5.1.1495
QNAP Systems Inc. / QTSaffected unspecified through 4.4.3.1444
QNAP Systems Inc. / QTSunaffected 4.3.x; unaffected 4.2.x
QNAP Systems Inc. / QuTS heroaffected unspecified before h4.5.1.1491

CWE

CWE-77, CWE-78

References

ADP enrichment

CVE

No English description supplied.