CVE-2021-28811

If exploited, this command injection vulnerability could allow remote attackers to run arbitrary commands. Roon Labs has already fixed this vulnerability in the following versions: Roon Server 2021-05-18 and later

Score

CVSS 3.1 7.2 High

Status

Modified - security@qnapsecurity.com.tw

Published

2021-06-08

Last modified

2024-09-16

Weaknesses

CWE-77, CWE-78

Affected products

• Roon Server (Roon Labs)
• Roon Server (Roonlabs)

References

• https://www.qnap.com/zh-tw/security-advisory/qsa-21-17