CVE-2018-0730 - Vulnerability Details

Vendors	Products
Qnap	Qts

Link	Providers
https://www.qnap.com/zh-tw/security-advisory/nas-201911-20

Show plain JSON

{"containers": {"cna": {"affected": [{"product": "QNAP NAS devices", "vendor": "n/a", "versions": [{"status": "affected", "version": "QTS 4.4.1: before build 20190918, QTS 4.3.6: before build 20190328, QTS 4.3.4: before build 20190325, QTS 4.3.3: before build 20190325, QTS 4.2.6: before build 20190325"}]}], "descriptions": [{"lang": "en", "value": "This command injection vulnerability in File Station allows attackers to execute commands on the affected device. To fix the vulnerability, QNAP recommend updating QTS to their latest versions."}], "problemTypes": [{"descriptions": [{"description": "Commend Injection", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2019-12-04T16:37:11", "orgId": "2fd009eb-170a-4625-932b-17a53af1051f", "shortName": "qnap"}, "references": [{"tags": ["x_refsource_CONFIRM"], "url": "https://www.qnap.com/zh-tw/security-advisory/nas-201911-20"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "security@qnap.com", "ID": "CVE-2018-0730", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "QNAP NAS devices", "version": {"version_data": [{"version_value": "QTS 4.4.1: before build 20190918, QTS 4.3.6: before build 20190328, QTS 4.3.4: before build 20190325, QTS 4.3.3: before build 20190325, QTS 4.2.6: before build 20190325"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "This command injection vulnerability in File Station allows attackers to execute commands on the affected device. To fix the vulnerability, QNAP recommend updating QTS to their latest versions."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "Commend Injection"}]}]}, "references": {"reference_data": [{"name": "https://www.qnap.com/zh-tw/security-advisory/nas-201911-20", "refsource": "CONFIRM", "url": "https://www.qnap.com/zh-tw/security-advisory/nas-201911-20"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-05T03:35:49.324Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://www.qnap.com/zh-tw/security-advisory/nas-201911-20"}]}]}, "cveMetadata": {"assignerOrgId": "2fd009eb-170a-4625-932b-17a53af1051f", "assignerShortName": "qnap", "cveId": "CVE-2018-0730", "datePublished": "2019-12-04T16:37:11", "dateReserved": "2017-11-28T00:00:00", "dateUpdated": "2024-08-05T03:35:49.324Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{

containers : { »

cna : { »

affected : [ »

0 : { »

product : QNAP NAS devices (string)

vendor : n/a (string)

versions : [ »

0 : { »

status : affected (string)

version : QTS 4.4.1: before build 20190918, QTS 4.3.6: before build 20190328, QTS 4.3.4: before build 20190325, QTS 4.3.3: before build 20190325, QTS 4.2.6: before build 20190325 (string)

}

]

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : This command injection vulnerability in File Station allows attackers to execute commands on the affected device. To fix the vulnerability, QNAP recommend updating QTS to their latest versions. (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

description : Commend Injection (string)

lang : en (string)

type : text (string)

}

]

}

]

providerMetadata : { »

dateUpdated : 2019-12-04T16:37:11 (string)

orgId : 2fd009eb-170a-4625-932b-17a53af1051f (string)

shortName : qnap (string)

}

references : [ »

0 : { »

tags : [ »

0 : x_refsource_CONFIRM (string)

]

url : https://www.qnap.com/zh-tw/security-advisory/nas-201911-20 (string)

}

]

x_legacyV4Record : { »

CVE_data_meta : { »

ASSIGNER : security@qnap.com (string)

ID : CVE-2018-0730 (string)

STATE : PUBLIC (string)

}

affects : { »

vendor : { »

vendor_data : [ »

0 : { »

product : { »

product_data : [ »

0 : { »

product_name : QNAP NAS devices (string)

version : { »

version_data : [ »

0 : { »

version_value : QTS 4.4.1: before build 20190918, QTS 4.3.6: before build 20190328, QTS 4.3.4: before build 20190325, QTS 4.3.3: before build 20190325, QTS 4.2.6: before build 20190325 (string)

}

]

}

]

}

vendor_name : n/a (string)

}

]

}

data_format : MITRE (string)

data_type : CVE (string)

data_version : 4.0 (string)

description : { »

description_data : [ »

0 : { »

lang : eng (string)

value : This command injection vulnerability in File Station allows attackers to execute commands on the affected device. To fix the vulnerability, QNAP recommend updating QTS to their latest versions. (string)

}

]

}

problemtype : { »

problemtype_data : [ »

0 : { »

description : [ »

0 : { »

lang : eng (string)

value : Commend Injection (string)

}

]

}

]

}

references : { »

reference_data : [ »

0 : { »

name : https://www.qnap.com/zh-tw/security-advisory/nas-201911-20 (string)

refsource : CONFIRM (string)

url : https://www.qnap.com/zh-tw/security-advisory/nas-201911-20 (string)

}

]

}

adp : [ »

0 : { »

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-05T03:35:49.324Z (string)

}

title : CVE Program Container (string)

references : [ »

0 : { »

tags : [ »

0 : x_refsource_CONFIRM (string)

1 : x_transferred (string)

]

url : https://www.qnap.com/zh-tw/security-advisory/nas-201911-20 (string)

}

]

}

]

}

cveMetadata : { »

assignerOrgId : 2fd009eb-170a-4625-932b-17a53af1051f (string)

assignerShortName : qnap (string)

cveId : CVE-2018-0730 (string)

datePublished : 2019-12-04T16:37:11 (string)

dateReserved : 2017-11-28T00:00:00 (string)

dateUpdated : 2024-08-05T03:35:49.324Z (string)

state : PUBLISHED (string)

}

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:qnap:qts:4.2.6:*:*:*:*:*:*:*", "matchCriteriaId": "1D9E6F8F-A433-45A7-8839-5D478FE179A4", "vulnerable": true}, {"criteria": "cpe:2.3:o:qnap:qts:4.3.3.0868:*:*:*:*:*:*:*", "matchCriteriaId": "1931A1D6-C1E6-410A-9F9E-9FD949D42C58", "vulnerable": true}, {"criteria": "cpe:2.3:o:qnap:qts:4.3.3.0998:*:*:*:*:*:*:*", "matchCriteriaId": "77FFA90F-FDFA-4B73-960F-BEE7A92DB6BA", "vulnerable": true}, {"criteria": "cpe:2.3:o:qnap:qts:4.3.4.0899:*:*:*:*:*:*:*", "matchCriteriaId": "98DCB45E-6024-4BB6-A40A-1CB871343930", "vulnerable": true}, {"criteria": "cpe:2.3:o:qnap:qts:4.3.4.1029:*:*:*:*:*:*:*", "matchCriteriaId": "485AF3DC-126D-464C-A6ED-59746031BCC5", "vulnerable": true}, {"criteria": "cpe:2.3:o:qnap:qts:4.3.6.0895:*:*:*:*:*:*:*", "matchCriteriaId": "A1AB2488-4D3D-494B-9C93-1AA3C7964644", "vulnerable": true}, {"criteria": "cpe:2.3:o:qnap:qts:4.3.6.0907:*:*:*:*:*:*:*", "matchCriteriaId": "6C24D008-D055-4A2C-88D4-85FB6DC45EFE", "vulnerable": true}, {"criteria": "cpe:2.3:o:qnap:qts:4.3.6.0923:*:*:*:*:*:*:*", "matchCriteriaId": "B64D1A6D-D306-46B8-B345-3D9C38544761", "vulnerable": true}, {"criteria": "cpe:2.3:o:qnap:qts:4.3.6.0944:*:*:*:*:*:*:*", "matchCriteriaId": "067C0A13-525C-4376-A6CC-0B86F7F92670", "vulnerable": true}, {"criteria": "cpe:2.3:o:qnap:qts:4.3.6.0959:*:*:*:*:*:*:*", "matchCriteriaId": "4BAE62E0-5FA0-4B9F-ACCA-9C8C70AC1F2C", "vulnerable": true}, {"criteria": "cpe:2.3:o:qnap:qts:4.3.6.0979:*:*:*:*:*:*:*", "matchCriteriaId": "B6023A8C-77A8-4B79-ACC6-872E98CA0D29", "vulnerable": true}, {"criteria": "cpe:2.3:o:qnap:qts:4.3.6.0993:*:*:*:*:*:*:*", "matchCriteriaId": "CAA72D06-4FE1-4DC3-A96B-2975A4A9AF84", "vulnerable": true}, {"criteria": "cpe:2.3:o:qnap:qts:4.3.6.1013:*:*:*:*:*:*:*", "matchCriteriaId": "0CD59BCF-E119-4910-90CE-DCA212D146F5", "vulnerable": true}, {"criteria": "cpe:2.3:o:qnap:qts:4.3.6.1033:*:*:*:*:*:*:*", "matchCriteriaId": "E8F01168-A599-480D-BEB1-FA0195B696E6", "vulnerable": true}, {"criteria": "cpe:2.3:o:qnap:qts:4.4.1.0948:beta:*:*:*:*:*:*", "matchCriteriaId": "C0EDB4B0-42CD-42E4-8EA6-6C7E6946608F", "vulnerable": true}, {"criteria": "cpe:2.3:o:qnap:qts:4.4.1.0949:beta:*:*:*:*:*:*", "matchCriteriaId": "94179DF2-2E1F-4673-B834-987BEE24242B", "vulnerable": true}, {"criteria": "cpe:2.3:o:qnap:qts:4.4.1.0978:beta_2:*:*:*:*:*:*", "matchCriteriaId": "2768EC66-AE75-405B-B92B-547840C10D78", "vulnerable": true}, {"criteria": "cpe:2.3:o:qnap:qts:4.4.1.0998:beta_3:*:*:*:*:*:*", "matchCriteriaId": "F83BCDD9-5227-4677-B174-65C653EEDBA1", "vulnerable": true}, {"criteria": "cpe:2.3:o:qnap:qts:4.4.1.0999:beta_3:*:*:*:*:*:*", "matchCriteriaId": "B3AFEC02-4082-4CF2-BDEF-B42CAF6C2AAE", "vulnerable": true}, {"criteria": "cpe:2.3:o:qnap:qts:4.4.1.1031:beta_4:*:*:*:*:*:*", "matchCriteriaId": "0E4BC7EF-8E5C-4D4A-9365-28DA0CC0E879", "vulnerable": true}, {"criteria": "cpe:2.3:o:qnap:qts:4.4.1.1033:beta_4:*:*:*:*:*:*", "matchCriteriaId": "491637BB-CF44-43FE-8FF1-AAA22E848B64", "vulnerable": true}, {"criteria": "cpe:2.3:o:qnap:qts:4.4.1.1064:*:*:*:*:*:*:*", "matchCriteriaId": "C0E47BAD-87AD-49AB-87B6-E5188067F961", "vulnerable": true}, {"criteria": "cpe:2.3:o:qnap:qts:4.4.1.1081:*:*:*:*:*:*:*", "matchCriteriaId": "1FB45CEB-A2E8-454A-8BA0-7BA039E50608", "vulnerable": true}, {"criteria": "cpe:2.3:o:qnap:qts:4.4.1.1086:*:*:*:*:*:*:*", "matchCriteriaId": "F5706EBB-06AD-433F-88E3-B273981A2F4F", "vulnerable": true}, {"criteria": "cpe:2.3:o:qnap:qts:4.4.1.1101:*:*:*:*:*:*:*", "matchCriteriaId": "215082F9-960F-483A-99EC-9861687CB18F", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "This command injection vulnerability in File Station allows attackers to execute commands on the affected device. To fix the vulnerability, QNAP recommend updating QTS to their latest versions."}, {"lang": "es", "value": "Esta vulnerabilidad de inyecci\u00f3n de comandos en File Station permite a atacantes ejecutar comandos sobre el dispositivo afectado. Para corregir la vulnerabilidad, QNAP recomienda actualizar QTS a sus \u00faltimas versiones."}], "id": "CVE-2018-0730", "lastModified": "2024-11-21T03:38:49.470", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2019-12-04T17:16:42.993", "references": [{"source": "security@qnapsecurity.com.tw", "tags": ["Vendor Advisory"], "url": "https://www.qnap.com/zh-tw/security-advisory/nas-201911-20"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://www.qnap.com/zh-tw/security-advisory/nas-201911-20"}], "sourceIdentifier": "security@qnapsecurity.com.tw", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-77"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:qnap:qts:4.2.6:*:*:*:*:*:*:* (string)

matchCriteriaId : 1D9E6F8F-A433-45A7-8839-5D478FE179A4 (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:o:qnap:qts:4.3.3.0868:*:*:*:*:*:*:* (string)

matchCriteriaId : 1931A1D6-C1E6-410A-9F9E-9FD949D42C58 (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:o:qnap:qts:4.3.3.0998:*:*:*:*:*:*:* (string)

matchCriteriaId : 77FFA90F-FDFA-4B73-960F-BEE7A92DB6BA (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:o:qnap:qts:4.3.4.0899:*:*:*:*:*:*:* (string)

matchCriteriaId : 98DCB45E-6024-4BB6-A40A-1CB871343930 (string)

vulnerable : true (boolean)

}

4 : { »

criteria : cpe:2.3:o:qnap:qts:4.3.4.1029:*:*:*:*:*:*:* (string)

matchCriteriaId : 485AF3DC-126D-464C-A6ED-59746031BCC5 (string)

vulnerable : true (boolean)

}

5 : { »

criteria : cpe:2.3:o:qnap:qts:4.3.6.0895:*:*:*:*:*:*:* (string)

matchCriteriaId : A1AB2488-4D3D-494B-9C93-1AA3C7964644 (string)

vulnerable : true (boolean)

}

6 : { »

criteria : cpe:2.3:o:qnap:qts:4.3.6.0907:*:*:*:*:*:*:* (string)

matchCriteriaId : 6C24D008-D055-4A2C-88D4-85FB6DC45EFE (string)

vulnerable : true (boolean)

}

7 : { »

criteria : cpe:2.3:o:qnap:qts:4.3.6.0923:*:*:*:*:*:*:* (string)

matchCriteriaId : B64D1A6D-D306-46B8-B345-3D9C38544761 (string)

vulnerable : true (boolean)

}

8 : { »

criteria : cpe:2.3:o:qnap:qts:4.3.6.0944:*:*:*:*:*:*:* (string)

matchCriteriaId : 067C0A13-525C-4376-A6CC-0B86F7F92670 (string)

vulnerable : true (boolean)

}

9 : { »

criteria : cpe:2.3:o:qnap:qts:4.3.6.0959:*:*:*:*:*:*:* (string)

matchCriteriaId : 4BAE62E0-5FA0-4B9F-ACCA-9C8C70AC1F2C (string)

vulnerable : true (boolean)

}

10 : { »

criteria : cpe:2.3:o:qnap:qts:4.3.6.0979:*:*:*:*:*:*:* (string)

matchCriteriaId : B6023A8C-77A8-4B79-ACC6-872E98CA0D29 (string)

vulnerable : true (boolean)

}

11 : { »

criteria : cpe:2.3:o:qnap:qts:4.3.6.0993:*:*:*:*:*:*:* (string)

matchCriteriaId : CAA72D06-4FE1-4DC3-A96B-2975A4A9AF84 (string)

vulnerable : true (boolean)

}

12 : { »

criteria : cpe:2.3:o:qnap:qts:4.3.6.1013:*:*:*:*:*:*:* (string)

matchCriteriaId : 0CD59BCF-E119-4910-90CE-DCA212D146F5 (string)

vulnerable : true (boolean)

}

13 : { »

criteria : cpe:2.3:o:qnap:qts:4.3.6.1033:*:*:*:*:*:*:* (string)

matchCriteriaId : E8F01168-A599-480D-BEB1-FA0195B696E6 (string)

vulnerable : true (boolean)

}

14 : { »

criteria : cpe:2.3:o:qnap:qts:4.4.1.0948:beta:*:*:*:*:*:* (string)

matchCriteriaId : C0EDB4B0-42CD-42E4-8EA6-6C7E6946608F (string)

vulnerable : true (boolean)

}

15 : { »

criteria : cpe:2.3:o:qnap:qts:4.4.1.0949:beta:*:*:*:*:*:* (string)

matchCriteriaId : 94179DF2-2E1F-4673-B834-987BEE24242B (string)

vulnerable : true (boolean)

}

16 : { »

criteria : cpe:2.3:o:qnap:qts:4.4.1.0978:beta_2:*:*:*:*:*:* (string)

matchCriteriaId : 2768EC66-AE75-405B-B92B-547840C10D78 (string)

vulnerable : true (boolean)

}

17 : { »

criteria : cpe:2.3:o:qnap:qts:4.4.1.0998:beta_3:*:*:*:*:*:* (string)

matchCriteriaId : F83BCDD9-5227-4677-B174-65C653EEDBA1 (string)

vulnerable : true (boolean)

}

18 : { »

criteria : cpe:2.3:o:qnap:qts:4.4.1.0999:beta_3:*:*:*:*:*:* (string)

matchCriteriaId : B3AFEC02-4082-4CF2-BDEF-B42CAF6C2AAE (string)

vulnerable : true (boolean)

}

19 : { »

criteria : cpe:2.3:o:qnap:qts:4.4.1.1031:beta_4:*:*:*:*:*:* (string)

matchCriteriaId : 0E4BC7EF-8E5C-4D4A-9365-28DA0CC0E879 (string)

vulnerable : true (boolean)

}

20 : { »

criteria : cpe:2.3:o:qnap:qts:4.4.1.1033:beta_4:*:*:*:*:*:* (string)

matchCriteriaId : 491637BB-CF44-43FE-8FF1-AAA22E848B64 (string)

vulnerable : true (boolean)

}

21 : { »

criteria : cpe:2.3:o:qnap:qts:4.4.1.1064:*:*:*:*:*:*:* (string)

matchCriteriaId : C0E47BAD-87AD-49AB-87B6-E5188067F961 (string)

vulnerable : true (boolean)

}

22 : { »

criteria : cpe:2.3:o:qnap:qts:4.4.1.1081:*:*:*:*:*:*:* (string)

matchCriteriaId : 1FB45CEB-A2E8-454A-8BA0-7BA039E50608 (string)

vulnerable : true (boolean)

}

23 : { »

criteria : cpe:2.3:o:qnap:qts:4.4.1.1086:*:*:*:*:*:*:* (string)

matchCriteriaId : F5706EBB-06AD-433F-88E3-B273981A2F4F (string)

vulnerable : true (boolean)

}

24 : { »

criteria : cpe:2.3:o:qnap:qts:4.4.1.1101:*:*:*:*:*:*:* (string)

matchCriteriaId : 215082F9-960F-483A-99EC-9861687CB18F (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : This command injection vulnerability in File Station allows attackers to execute commands on the affected device. To fix the vulnerability, QNAP recommend updating QTS to their latest versions. (string)

}

1 : { »

lang : es (string)

value : Esta vulnerabilidad de inyección de comandos en File Station permite a atacantes ejecutar comandos sobre el dispositivo afectado. Para corregir la vulnerabilidad, QNAP recomienda actualizar QTS a sus últimas versiones. (string)

}

]

id : CVE-2018-0730 (string)

lastModified : 2024-11-21T03:38:49.470 (string)

metrics : { »

cvssMetricV2 : [ »

0 : { »

acInsufInfo : false (boolean)

baseSeverity : HIGH (string)

cvssData : { »

accessComplexity : LOW (string)

accessVector : NETWORK (string)

authentication : NONE (string)

availabilityImpact : PARTIAL (string)

baseScore : 7.5 (number)

confidentialityImpact : PARTIAL (string)

integrityImpact : PARTIAL (string)

vectorString : AV:N/AC:L/Au:N/C:P/I:P/A:P (string)

version : 2.0 (string)

}

exploitabilityScore : 10 (number)

impactScore : 6.4 (number)

obtainAllPrivilege : false (boolean)

obtainOtherPrivilege : false (boolean)

obtainUserPrivilege : false (boolean)

source : nvd@nist.gov (string)

type : Primary (string)

userInteractionRequired : false (boolean)

}

]

cvssMetricV31 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : HIGH (string)

baseScore : 9.8 (number)

baseSeverity : CRITICAL (string)

confidentialityImpact : HIGH (string)

integrityImpact : HIGH (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H (string)

version : 3.1 (string)

}

exploitabilityScore : 3.9 (number)

impactScore : 5.9 (number)

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

published : 2019-12-04T17:16:42.993 (string)

references : [ »

0 : { »

source : security@qnapsecurity.com.tw (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://www.qnap.com/zh-tw/security-advisory/nas-201911-20 (string)

}

1 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://www.qnap.com/zh-tw/security-advisory/nas-201911-20 (string)

}

]

sourceIdentifier : security@qnapsecurity.com.tw (string)

vulnStatus : Modified (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-77 (string)

}

]

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact Partial

Availability Impact Partial

Affected Vendors & Products

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact Partial

Availability Impact Partial

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object