CVE-2021-34348
Command Injection Vulnerability in QVR
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Command Injection Vulnerability in QVR
| Assigner | qnap |
| Reserved | 2021-06-08 |
| Published | 2021-09-27 |
| Updated | 2024-09-16 |
A command injection vulnerability has been reported to affect QNAP device running QVR. If exploited, this vulnerability could allow remote attackers to run arbitrary commands. We have already fixed this vulnerability in the following versions of QVR: QVR 5.1.5 build 20210803 and later
| CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
360 的安全研究员 侯留洋（houliuyang@360.cn）和叶根深（yegenshen@360.cn）
https://www.qnap.com/en/security-advisory/qsa-21-35
