CVE-2017-6361

CRITICAL

QNAP QTS Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Title source: VulnCheck
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2017-6361 has a selected CVSS score of 9.8 (critical); EIP currently links 1 catalogued exploit.

Description

QNAP QTS before 4.2.4 Build 20170313 allows attackers to execute arbitrary commands via unspecified vectors.

Description source: CVE List

Exploitation context

Known exploitation

VulnCheck KEV
Listed · Sep 22, 2014 · VulnCheck
Reported exploitation
Observed · VulnCheck

Available material

Catalogued exploits
1

Affected products and versions

1
ProductSourceVersion range

QTS

Browse QNAP / QTS
VulnCheckVersion data not supplied

Proofs of concept

1

Catalogued exploits

ExploitDBQNAP TVS-663 QTS < 4.2.4 build 20170313 - Command InjectionExploitDB exploitby Harry SintonenNot analyzed1 file

linked to 3 vulnerabilities

ExploitDB
PoC details

References

6