An SQL injection vulnerability has been reported to affect QNAP NAS running Multimedia Console or the Media Streaming add-on. If exploited, the vulnerability allows remote attackers to obtain application information. QNAP has already fixed this vulnerability in the following versions of Multimedia Console and the Media Streaming add-on. QTS 4.3.3: Media Streaming add-on 430.1.8.10 and later QTS 4.3.6: Media Streaming add-on 430.1.8.8 and later QTS 4.4.x and later: Multimedia Console 1.3.4 and later We have also fixed this vulnerability in the following versions of QTS 4.3.3 and QTS 4.3.6, respectively: QTS 4.3.3.1624 Build 20210416 or later QTS 4.3.6.1620 Build 20210322 or later
oryginał ENCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HQnap Media Streaming Add On
APPQnap< 430.1.8.10< 430.1.8.8Qnap Multimedia Console
APPQnap< 1.3.4Qnap Qts
OSQnap4.3.34.3.3.00954.3.3.00964.3.3.01364.3.3.01544.3.3.01744.3.3.01884.3.3.02104.3.3.02294.3.3.02384.3.3.02624.3.3.02994.3.3.03514.3.3.03534.3.3.0361+ 40 więcej
Powiązane podatności
An externally controlled reference to a resource vulnerability has been reported to affect QNAP NAS running Ph...
An improper authorization vulnerability has been reported to affect QNAP NAS running HBS 3 (Hybrid Backup Sync...
A command injection vulnerability has been reported to affect QTS and QuTS hero. If exploited, this vulnerabil...
If exploited, this command injection vulnerability could allow remote attackers to run arbitrary commands. QNA...
This external control of file name or path vulnerability allows remote attackers to access or modify system fi...