CVE-2017-7639 QNAP NAS application Proxy Server through version 1.2.0 does not authenticate requests properly. Successful exploitation can lead to change of the settings of Proxy Server.
MediumCVSS 5.3
EPSS 1.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
QNAP NAS application Proxy Server through version 1.2.0 does not authenticate requests properly. Successful exploitation can lead to change of the settings of Proxy Server.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| qnap nas proxy server | < 1.3.0 | 1.3.0 |
References
- 1041025 third-party-advisory vdb-entry
- www.qnap.com vendor-advisory