CVE-2018-14748

Improper Authorization vulnerability in QTS 4.3.5 build 20181013, QTS 4.3.4 build 20181008, QTS 4.3.3 build 20180829, QTS 4.2.6 build 20180829 and earlier versions could allow remote attackers to power off the NAS.

Score

CVSS 3.0 7.5 High

Status

Modified - security@qnapsecurity.com.tw

Published

2018-11-28

Last modified

2024-08-05

Weaknesses

CWE-285, CWE-863

Affected products

• Qnap Qts (Qnap)
• Qts (Qnap)

References

• https://www.qnap.com/zh-tw/security-advisory/nas-201811-22