Description
Buffer Overflow vulnerability in NAS devices. QTS allows attackers to run arbitrary code. This issue affects: QNAP Systems Inc. QTS version 4.2.6 and prior versions on build 20180711; version 4.3.3 and prior versions on build 20180725; version 4.3.4 and prior versions on build 20180710.
References (1)
Core 1
Core References
Vendor Advisory x_refsource_confirm
https://www.qnap.com/zh-tw/security-advisory/nas-201809-20
Scores
CVSS v3
7.7
EPSS
0.0126
EPSS Percentile
79.6%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:H/A:L
Details
CWE
CWE-119
CWE-120
Status
published
Products (3)
qnap/qts
4.2.6
qnap/qts
4.3.3
qnap/qts
4.3.4
Published
Nov 27, 2018
Tracked Since
Feb 18, 2026