Skip to content

CVE-2017-7876 This command injection vulnerability in QTS allows attackers to run arbitrary commands in the compromised application. QNAP have already fixed the issue in QTS 4.2.6 build 20170517, QTS 4.3.3.0174 bui...

CriticalCVSS 10.0 EPSS 3.4%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

This command injection vulnerability in QTS allows attackers to run arbitrary commands in the compromised application. QNAP have already fixed the issue in QTS 4.2.6 build 20170517, QTS 4.3.3.0174 build 20170503 and later versions.

Affected products

ProductAffected versionsFixed in
qnap qts <= 4.2.6 No fix listed

References