Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2021-38685

Command Injection Vulnerability in VioStor

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
qnap

Description

A command injection vulnerability has been reported to affect QNAP device, VioStor. If exploited, this vulnerability allows remote attackers to run arbitrary commands. We have already fixed this vulnerability in the following versions of QVR: QVR FW 5.1.6 build 20211109 and later

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

QNAP Systems Inc. QVR

  • unspecified to < QVR FW 5.1.6 build 20211109affected

References