CVE-2018-0714

N/A

Description

Command injection vulnerability in Helpdesk versions 1.1.21 and earlier in QNAP QTS 4.2.6 build 20180531, QTS 4.3.3 build 20180528, QTS 4.3.4 build 20180528 and their earlier versions could allow remote attackers to run arbitrary commands in the compromised application.

CVE Details

CVSS v3.1 ScoreN/A

Published8/13/2018

Last Modified11/21/2024

Sourcenvd

Honeypot Sightings0

Affected Products

qnap:helpdeskqnap:qts

Weaknesses (CWE)

CWE-77

References

https://www.qnap.com/zh-tw/security-advisory/nas-201808-13(security@qnapsecurity.com.tw)

https://www.qnap.com/zh-tw/security-advisory/nas-201808-13(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.