Description
QNAP NAS devices contain a command injection vulnerability which could allow attackers to perform remote code execution.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| QTS | QNAP Systems Inc. / QTS | >= unspecified, < 4.5.2.1566 Build 20210202 | affected |
| QTS | QNAP Systems Inc. / QTS | >= unspecified, < 4.5.1.1495 Build 20201123 | affected |
| QTS | QNAP Systems Inc. / QTS | >= unspecified, < 4.3.6.1620 Build 20210322 | affected |
| QTS | QNAP Systems Inc. / QTS | >= unspecified, < 4.3.4.1632 Build 20210324 | affected |
| QTS | QNAP Systems Inc. / QTS | >= unspecified, < 4.3.3.1624 Build 20210416 | affected |
| QTS | QNAP Systems Inc. / QTS | >= unspecified, < 4.2.6 Build 20210327 | affected |
| QuTS hero | QNAP Systems Inc. / QuTS hero | >= unspecified, < h4.5.1.1491 build 20201119 | affected |