Skip to content
OpenAdvisories
Critical · 9.8 CVE-2020-2507 EUVD-2020-22300GHSA-7r29-w7vh-5p6q

command injection vulnerability in Helpdesk

Published Feb 3, 2021 · Updated Sep 16, 2024 · Assigned by qnap

Description

The vulnerability have been reported to affect earlier versions of QTS. If exploited, this command injection vulnerability could allow remote attackers to run arbitrary commands. This issue affects: QNAP Systems Inc. Helpdesk versions prior to 3.0.3.

Affected products

VendorProductAffectedFixed
QNAP Systems Helpdesk unspecified – < 3.0.3 3.0.3

References