CVE-2017-13071
CRITICALQNAP Video Station <= 5.1.3 (for QTS 4.3.3) and <= 5.2.0 (for QTS 4.3.4) - Remote Command Execution
Title source: llmDescription
QNAP has already patched this vulnerability. This security concern allows a remote attacker to run arbitrary commands on the QNAP Video Station 5.1.3 (for QTS 4.3.3), 5.2.0 (for QTS 4.3.4), and earlier.
References (1)
Core 1
Core References
Vendor Advisory x_refsource_misc
https://www.qnap.com/zh-tw/security-advisory/nas-201711-21
Scores
CVSS v3
9.8
EPSS
0.0091
EPSS Percentile
76.1%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-77
Status
published
Products (3)
QNAP/Video Station
Video Station 5.1.3 (for QTS 4.3.3), 5. 2.0 (for QTS 4.3.4), and earlier
qnap/video_station
5.1.3
qnap/video_station
5.2.0
Published
Nov 22, 2017
Tracked Since
Feb 18, 2026