Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2018-19949

If exploited, this command injection vulnerability could allow remote attackers to run arbitrary commands. QNAP has already fixed the issue in the following QTS versions. QTS 4.4.2

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
qnap

Description

If exploited, this command injection vulnerability could allow remote attackers to run arbitrary commands. QNAP has already fixed the issue in the following QTS versions. QTS 4.4.2.1231 on build 20200302; QTS 4.4.1.1201 on build 20200130; QTS 4.3.6.1218 on build 20200214; QTS 4.3.4.1190 on build 20200107; QTS 4.3.3.1161 on build 20200109; QTS 4.2.6 on build 20200109.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

QNAP Systems Inc. QTS

  • unspecified to < 4.4.2.1231affected

QNAP Systems Inc. QTS

  • unspecified to < 4.4.1.1201affected

QNAP Systems Inc. QTS

  • unspecified to < 4.3.6.1218affected

QNAP Systems Inc. QTS

  • unspecified to < 4.3.4.1190affected

QNAP Systems Inc. QTS

  • unspecified to < 4.3.3.1161affected
  • unspecified to < 4.2.6affected

References