CVE-2024-56808: falha de baixa gravidade em QNAP Systems Inc. Media Streaming add-on
Media Streaming add-on
Publicada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
8Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 2epss 0.7%
A command injection vulnerability has been reported to affect Media Streaming add-on. If an attacker gains local network access who have also gained a user account, they can then exploit the vulnerability to execute arbitrary commands.
We have already fixed the vulnerability in the following version:
Media Streaming add-on 500.1.1.6 ( 2024/08/02 ) and later
CVSS:4.0/AV:P/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U
Produtos afetados
QNAP Systems Inc. · Media Streaming add-onCVEs relacionadas — QNAP Systems Inc. Media Streaming add-on
No mesmo produto, das mais perigosas para as menos.
CVE-2023-23369CRITICALQTS, Multimedia Console, and Media Streaming add-onEPSS 14.1%CVE-2020-36195CRITICALSQL Injection Vulnerability in Multimedia Console and the Media Streaming Add-OnEPSS 1.8%CVE-2024-50395MEDIUMMedia Streaming add-onEPSS 1.4%CVE-2021-34362HIGHCommand Injection Vulnerability in Media Streaming Add-onEPSS 1.3%CVE-2023-47220MEDIUMMedia Streaming add-onEPSS 1.2%CVE-2023-47222CRITICALMedia Streaming add-onEPSS 0.5%