Skip to content
OpenAdvisories
Medium · 6.7 CVE-2020-36198 EUVD-2020-23762GHSA-7wxf-2j8p-f3hw

Command Injection Vulnerability in Malware Remover

Published May 13, 2021 · Updated Sep 17, 2024 · Assigned by qnap

Description

A command injection vulnerability has been reported to affect certain versions of Malware Remover. If exploited, this vulnerability allows remote attackers to execute arbitrary commands. This issue affects: QNAP Systems Inc. Malware Remover versions prior to 4.6.1.0. This issue does not affect: QNAP Systems Inc. Malware Remover 3.x.

Affected products

VendorProductAffectedFixed
QNAP Systems Malware Remover unspecified – < 4.6.1.0 4.6.1.0

References