CVE-2020-36198

MEDIUM EXPLOITED IN THE WILD RANSOMWARE

QNAP Malware Remover < 4.6.1.0 - Remote Command Injection

Title source: llm
STIX 2.1

Exploitation Summary

CVE-2020-36198 has been observed exploited in the wild (reported by VulnCheck KEV, InTheWild.io), including in ransomware campaigns.

Description

A command injection vulnerability has been reported to affect certain versions of Malware Remover. If exploited, this vulnerability allows remote attackers to execute arbitrary commands. This issue affects: QNAP Systems Inc. Malware Remover versions prior to 4.6.1.0. This issue does not affect: QNAP Systems Inc. Malware Remover 3.x.

References (3)

Core 3
Core References
Third Party Advisory, VDB Entry x_refsource_misc
https://www.zerodayinitiative.com/advisories/ZDI-21-592/

Scores

CVSS v3 6.7
EPSS 0.0094
EPSS Percentile 76.5%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Details

VulnCheck KEV 2022-03-24
InTheWild.io 2021-10-21
Ransomware Use Confirmed
CWE
CWE-78 CWE-77
Status published
Products (1)
qnap/malware_remover 4.5.4.0 - 4.6.1.0
Published May 13, 2021
Tracked Since Feb 18, 2026