Test Kennung:	1.3.6.1.4.1.25623.1.0.811727
Kategorie:	Web application abuses
Titel:	QNAP NAS 'Transcode Server' Command Execution Vulnerability
Zusammenfassung:	QNAP NAS device is prone to a code execution vulnerability.
Beschreibung:	Summary: QNAP NAS device is prone to a code execution vulnerability. Vulnerability Insight: The flaw is due to error in 'rmfile' command in Transcode Server which does not filter certain special characters and allow them to pass in the command. Vulnerability Impact: Successful exploitation will allow remote attackers to execute arbitrary commands on the remote affected device. Affected Software/OS: QNAP TS-431 with firmware version 4.3.3.0262 (20170727) and QNAP_TS-131. Many other QNAP models may also be affected. Solution: Upgrade to the latest version. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2017-13067
Copyright	Copyright (C) 2017 Greenbone Networks GmbH

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.