CVE-2018-0718 Command injection vulnerability in Music Station 5.1.2 and earlier versions in QNAP QTS 4.3.3 and 4.3.4 could allow remote attackers to run arbitrary commands in the compromised application.
CriticalCVSS 9.8
EPSS 1.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Command injection vulnerability in Music Station 5.1.2 and earlier versions in QNAP QTS 4.3.3 and 4.3.4 could allow remote attackers to run arbitrary commands in the compromised application.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| qnap music station | <= 5.1.2 | No fix listed |
| qnap music station | = 5.1.2 and earlier versions in QTS 4.3.3 and 4.3.4 | No fix listed |
References
- www.qnap.com vendor-advisory