CVE-2017-7640 QNAP NAS application Media Streaming add-on version 421.1.0.2, 430.1.2.0, and earlier allows remote attackers to run arbitrary OS commands against the system with root privileges.
CriticalCVSS 9.8
EPSS 3.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
QNAP NAS application Media Streaming add-on version 421.1.0.2, 430.1.2.0, and earlier allows remote attackers to run arbitrary OS commands against the system with root privileges.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| qnap media streaming add-on | <= 430.1.2.0 | No fix listed |
| qnap media streaming add-on | <= 421.1.0.2 | No fix listed |
| QNAP Media Streaming Add-On | = 421.1.0.2, 430.1.2.0, and earlier | No fix listed |
References
- www.qnap.com vendor-advisory