CVE-2021-34362highCWE-78

CVE-2021-34362: falha de alta gravidade em QNAP Systems Inc. Media Streaming add-on

Command Injection Vulnerability in Media Streaming Add-on

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Media Streaming add-on

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 8.7epss 1.3%
A command injection vulnerability has been reported to affect QNAP device running Media Streaming add-on. If exploited, this vulnerability allow remote attackers to run arbitrary commands. We have already fixed this vulnerability in the following versions of Media Streaming add-on: QTS 5.0.0: Media Streaming add-on 500.0.0.3 ( 2021/08/20 ) and later QTS 4.5.4: Media Streaming add-on 500.0.0.3 ( 2021/08/20 ) and later QTS 4.3.6: Media Streaming add-on 430.1.8.12 ( 2021/08/20 ) and later QTS 4.3.3: Media Streaming add-on 430.1.8.12 ( 2021/09/29 ) and later QuTS-Hero 5.0.0: Media Streaming add-on 500.0.0.3 ( 2021/08/20 ) and later
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N
Produtos afetados
QNAP Systems Inc. · Media Streaming add-on
CVEs relacionadas — QNAP Systems Inc. Media Streaming add-on

No mesmo produto, das mais perigosas para as menos.

CVE-2023-23369CRITICALQTS, Multimedia Console, and Media Streaming add-onEPSS 14.1%CVE-2020-36195CRITICALSQL Injection Vulnerability in Multimedia Console and the Media Streaming Add-OnEPSS 1.8%CVE-2024-50395MEDIUMMedia Streaming add-onEPSS 1.4%CVE-2023-47220MEDIUMMedia Streaming add-onEPSS 1.2%CVE-2024-56808LOWMedia Streaming add-onEPSS 0.7%CVE-2023-47222CRITICALMedia Streaming add-onEPSS 0.5%