CVE-2017-10700

In the medialibrary component in QNAP NAS 4.3.3.0229, an un-authenticated, remote attacker can execute arbitrary system commands as the root user of the NAS application.

Score

CVSS 3.0 9.8 Critical

Status

Modified - cve@mitre.org

Published

2017-09-19

Last modified

2024-08-05

Weaknesses

CWE-20

Affected products

• Qts (Qnap)

References

• https://www.lateralsecurity.com/downloads/Lateral_Security-Advisory-QNAP_QTS_CVE-2017-10700.pdf
• https://www.qnap.com/en/support/con_show.php?cid=128