CVE-2017-17033

A buffer overflow vulnerability in password function in QNAP QTS version 4.2.6 build 20171026, 4.3.3.0378 build 20171117, 4.3.4.0387 (Beta 2) build 20171116 and earlier could allow remote attackers to execute arbitrary code on NAS devices.

Score

CVSS 3.0 9.8 Critical

Status

Modified - security@qnapsecurity.com.tw

Published

2017-12-21

Last modified

2024-09-16

Weaknesses

CWE-119

Affected products

• Qts (Qnap)
• Qts Notification Function (Qnap)

References

• http://www.securitytracker.com/id/1040018
• https://www.qnap.com/zh-tw/security-advisory/nas-201712-15