CVE-2021-38684highCWE-787

CVE-2021-38684: high-severity vulnerability in QNAP Systems Inc. Multimedia Console

Buffer Overflow Vulnerability in Multimedia Console

Published · Updated

Follow this CVE+ Monitor Multimedia Console

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 8.1epss 1.3%
A stack buffer overflow vulnerability has been reported to affect QNAP NAS running Multimedia Console. If exploited, this vulnerability allows attackers to execute arbitrary code. We have already fixed this vulnerability in the following versions of Multimedia Console: Multimedia Console 1.4.3 ( 2021/10/05 ) and later Multimedia Console 1.5.3 ( 2021/10/05 ) and later
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
QNAP Systems Inc. · Multimedia Console
Related CVEs — QNAP Systems Inc. Multimedia Console

In the same product, most dangerous first.

CVE-2023-23369CRITICALQTS, Multimedia Console, and Media Streaming add-onEPSS 14.1%CVE-2020-36195CRITICALSQL Injection Vulnerability in Multimedia Console and the Media Streaming Add-OnEPSS 1.8%CVE-2023-23364HIGHMultimedia ConsoleEPSS 0.9%CVE-2020-2493—Cross-site Scripting Vulnerability in Multimedia ConsoleEPSS 0.8%