CVE-2017-7630

QNAP QTS 4.2.6 build 20171026, QTS 4.3.3 build 20170727 and earlier allows remote attackers to obtain potentially sensitive information (firmware version and running services) via a request to sysinfoReq.cgi.

Score

CVSS 3.0 5.3 Medium

Status

Modified - security@qnapsecurity.com.tw

Published

2018-03-27

Last modified

2024-09-17

Weaknesses

CWE-200

Affected products

• Qts (Qnap)

References

• https://www.qnap.com/zh-tw/security-advisory/nas-201803-23