Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2021-28804

Command Injection Vulnerabilities in QTS and QuTS hero

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
qnap

Description

A command injection vulnerabilities have been reported to affect QTS and QuTS hero. If exploited, this vulnerability allows attackers to execute arbitrary commands in a compromised application. This issue affects: QNAP Systems Inc. QTS versions prior to 4.5.1.1540 build 20210107. QNAP Systems Inc. QuTS hero versions prior to h4.5.1.1582 build 20210217.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

QNAP Systems Inc. QTS

  • unspecified to < 4.5.1.1540 build 20210107affected

QNAP Systems Inc. QuTS hero

  • unspecified to < h4.5.1.1582 build 20210217affected

References