Skip to content
OpenAdvisories
Unscored CVE-2018-14746 EUVD-2018-6632GHSA-mh4r-8qmm-p5vv

Command Injection vulnerability in QTS 4.3.5 build 20181013, QTS 4.3.4 build 20181008, QTS 4.3.3 build 20180829, QTS 4.2.6 build 20180829 a…

Published Nov 28, 2018 · Updated Aug 5, 2024 · Assigned by qnap

Vendor: QNAP Systems Product: QNAP QTS

Description

Command Injection vulnerability in QTS 4.3.5 build 20181013, QTS 4.3.4 build 20181008, QTS 4.3.3 build 20180829, QTS 4.2.6 build 20180829 and earlier versions could allow remote attackers to run arbitrary commands on the NAS.

Affected products

VendorProductAffectedFixed
QNAP QNAP QTS QTS 4.3.5 build 20181013, QTS 4.3.4 build 20181008, QTS 4.3.3 build 20180829, QTS 4.2.6 build 20180829 and earlier versions —

References