CVE-2021-38685criticalCWE-78

CVE-2021-38685: falha crítica em QNAP Systems Inc. QVR

Command Injection Vulnerability in VioStor

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar QVR

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

28Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 9.8epss 1.5%
A command injection vulnerability has been reported to affect QNAP device, VioStor. If exploited, this vulnerability allows remote attackers to run arbitrary commands. We have already fixed this vulnerability in the following versions of QVR: QVR FW 5.1.6 build 20211109 and later
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
QNAP Systems Inc. · QVR
CVEs relacionadas — QNAP Systems Inc. QVR

No mesmo produto, das mais perigosas para as menos.

CVE-2021-34352HIGHCommand Injection Vulnerability in QVREPSS 1.5%CVE-2021-34351CRITICALCommand Injection Vulnerability in QVREPSS 1.5%CVE-2021-34348CRITICALCommand Injection Vulnerability in QVREPSS 1.5%CVE-2021-34349HIGHCommand Injection Vulnerability in QVREPSS 1.5%CVE-2022-27588CRITICALVulnerability in QVREPSS 1.4%CVE-2023-34974HIGHQTS, QuTS hero, QuTScloud, QVR, QESEPSS 1.0%