PT-2021-4405
CVE-2021-34351
·
تاريخ النشر
2021-09-27
·
تاريخ التحديث
2021-10-05
الوصف من
CVSS 2.0
10
حرجةالمقاييسAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
QNAP QVR versions prior to 5.1.5 build 20210803
Description
A command injection issue has been reported, affecting QNAP devices running QVR. This could allow remote attackers to run arbitrary commands if exploited. The issue is related to the lack of neutralization of special elements used in the OS command.
Recommendations
For QNAP QVR versions prior to 5.1.5 build 20210803, update to QVR 5.1.5 build 20210803 or later to resolve the issue. As a temporary workaround, consider restricting access to the QVR system to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾