CVE-2017-13070 A DLL Hijacking vulnerability in QNAP Qsync for Windows (exe) version 4.2.2.0724 and earlier could allow remote attackers to execute arbitrary code on Windows machines.
HighCVSS 7.8
EPSS 2.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A DLL Hijacking vulnerability in QNAP Qsync for Windows (exe) version 4.2.2.0724 and earlier could allow remote attackers to execute arbitrary code on Windows machines.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| qnap qsync | <= 4.2.2.0724 | No fix listed |
| qnap Qsync for Windows (exe) | = 4.2.2.0724 and earlier | No fix listed |
References
- www.qnap.com issue-tracking vendor-advisory