CVE-2017-13071

QNAP has already patched this vulnerability. This security concern allows a remote attacker to run arbitrary commands on the QNAP Video Station 5.1.3 (for QTS 4.3.3), 5.2.0 (for QTS 4.3.4), and earlier.

Score

CVSS 3.0 9.8 Critical

Status

Modified - security@qnapsecurity.com.tw

Published

2017-11-22

Last modified

2024-09-16

Weaknesses

CWE-77

Affected products

• Video Station (Qnap)

References

• https://www.qnap.com/zh-tw/security-advisory/nas-201711-21