← voltar
CVE-2020-2507criticalexploração observadaCWE-77CWE-78

command injection vulnerability in Helpdesk

50Vexday Risk Score

Priorize a correção. Ela exploração observada pelo VulnCheck.

ssvc Actcvss 9.8epss 3.0%
da publicação à arma
Publicada no NVD3 de fev.
VulnCheck+30d
probabilidade de exploração
3.0%top 13% das CVEs
exploração observada
simVulnCheck
The vulnerability have been reported to affect earlier versions of QTS. If exploited, this command injection vulnerability could allow remote attackers to run arbitrary commands. This issue affects: QNAP Systems Inc. Helpdesk versions prior to 3.0.3.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H