CVE-2017-13070

A DLL Hijacking vulnerability in QNAP Qsync for Windows (exe) version 4.2.2.0724 and earlier could allow remote attackers to execute arbitrary code on Windows machines.

Score

CVSS 3.0 7.8 High

Status

Modified - security@qnapsecurity.com.tw

Published

2017-12-11

Last modified

2024-09-17

Weaknesses

CWE-426

Affected products

• Qsync (Qnap)
• Qsync For Windows Exe (Qnap)

References

• https://www.qnap.com/zh-tw/security-advisory/nas-201712-08