CVE-2018-0718

Command injection vulnerability in Music Station 5.1.2 and earlier versions in QNAP QTS 4.3.3 and 4.3.4 could allow remote attackers to run arbitrary commands in the compromised application.

Score

CVSS 3.0 9.8 Critical

Status

Modified - security@qnapsecurity.com.tw

Published

2018-09-14

Last modified

2024-09-16

Weaknesses

CWE-77

Affected products

• Music Station (Qnap)

References

• https://www.qnap.com/zh-tw/security-advisory/nas-201809-14