CVE-2018-0707 Command injection vulnerability in change password of QNAP Q'center Virtual Appliance version 1.7.1063 and earlier could allow authenticated users to run arbitrary commands.
HighCVSS 7.2
EPSS 58.8%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Command injection vulnerability in change password of QNAP Q'center Virtual Appliance version 1.7.1063 and earlier could allow authenticated users to run arbitrary commands.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| qnap qcenter | <= 1.7.1063 | No fix listed |
| qnap qcenter virtual appliance | = 1.7.1063 and earlier | No fix listed |
References
- packetstormsecurity.com exploit third-party-advisory vdb-entry
- 20180711 [CORE-2018-0006] - QNAP Qcenter Virtual Appliance Multiple Vulnerabilities exploit mailing-list third-party-advisory
- www.coresecurity.com exploit third-party-advisory
- 45015 exploit third-party-advisory vdb-entry
- 45043 exploit third-party-advisory vdb-entry
- www.qnap.com vendor-advisory
- 20180711 [CORE-2018-0006] - QNAP Qcenter Virtual Appliance Multiple Vulnerabilities exploit mailing-list third-party-advisory vdb-entry