CVE-2021-38684

A stack buffer overflow vulnerability has been reported to affect QNAP NAS running Multimedia Console. If exploited, this vulnerability allows attackers to execute arbitrary code. We have already fixed this vulnerability in the following versions of Multimedia Console: Multimedia Console 1.4.3 ( 2021/10/05 ) and later Multimedia Console 1.5.3 ( 2021/10/05 ) and later

Score

CVSS 3.1 9.8 Critical

Status

Modified - security@qnapsecurity.com.tw

Published

2021-11-13

Last modified

2024-09-17

Weaknesses

CWE-787

Affected products

• Multimedia Console (Qnap)
• Multimedia Console (Qnap Systems Inc.)

References

• https://www.qnap.com/en/security-advisory/qsa-21-45