CVE-2021-34362highCWE-78

CVE-2021-34362: fallo de gravedad alta en QNAP Systems Inc. Media Streaming add-on

Command Injection Vulnerability in Media Streaming Add-on

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear Media Streaming add-on

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

21Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 8.7epss 1.3%
A command injection vulnerability has been reported to affect QNAP device running Media Streaming add-on. If exploited, this vulnerability allow remote attackers to run arbitrary commands. We have already fixed this vulnerability in the following versions of Media Streaming add-on: QTS 5.0.0: Media Streaming add-on 500.0.0.3 ( 2021/08/20 ) and later QTS 4.5.4: Media Streaming add-on 500.0.0.3 ( 2021/08/20 ) and later QTS 4.3.6: Media Streaming add-on 430.1.8.12 ( 2021/08/20 ) and later QTS 4.3.3: Media Streaming add-on 430.1.8.12 ( 2021/09/29 ) and later QuTS-Hero 5.0.0: Media Streaming add-on 500.0.0.3 ( 2021/08/20 ) and later
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N
Productos afectados
QNAP Systems Inc. · Media Streaming add-on
CVEs relacionadas — QNAP Systems Inc. Media Streaming add-on

En el mismo producto, de las más peligrosas a las menos.

CVE-2023-23369CRITICALQTS, Multimedia Console, and Media Streaming add-onEPSS 14.1%CVE-2020-36195CRITICALSQL Injection Vulnerability in Multimedia Console and the Media Streaming Add-OnEPSS 1.8%CVE-2024-50395MEDIUMMedia Streaming add-onEPSS 1.4%CVE-2023-47220MEDIUMMedia Streaming add-onEPSS 1.2%CVE-2024-56808LOWMedia Streaming add-onEPSS 0.7%CVE-2023-47222CRITICALMedia Streaming add-onEPSS 0.5%