PT-2021-4408

CVE-2021-34348

Published

2021-09-27

Updated

2021-10-05

CVSS 3.1

9.8

Critical

MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions QNAP QVR versions prior to 5.1.5 build 20210803

Description A command injection issue affects QNAP devices running QVR, allowing remote attackers to execute arbitrary commands if exploited.

Recommendations For QNAP QVR versions prior to 5.1.5 build 20210803, update to QVR 5.1.5 build 20210803 or later to resolve the issue.

Exploitability

Fix

Impacts

Vendors

Affected products

Weakness enumeration

Related identifiers

Found an issue in the description? Have something to add? Feel free to write us 👾