2 lines
5.7 KiB
JSON
2 lines
5.7 KiB
JSON
{"affected":[{"affectedData":[{"product":"QNAP NAS devices","vendor":"n/a","versions":[{"status":"affected","version":"QTS 4.4.1: before build 20190918, QTS 4.3.6: before build 20190328, QTS 4.3.4: before build 20190325, QTS 4.3.3: before build 20190325, QTS 4.2.6: before build 20190325"}]}],"source":"security@qnapsecurity.com.tw"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:qnap:qts:4.2.6:*:*:*:*:*:*:*","matchCriteriaId":"1D9E6F8F-A433-45A7-8839-5D478FE179A4","vulnerable":true},{"criteria":"cpe:2.3:o:qnap:qts:4.3.3.0868:*:*:*:*:*:*:*","matchCriteriaId":"1931A1D6-C1E6-410A-9F9E-9FD949D42C58","vulnerable":true},{"criteria":"cpe:2.3:o:qnap:qts:4.3.3.0998:*:*:*:*:*:*:*","matchCriteriaId":"77FFA90F-FDFA-4B73-960F-BEE7A92DB6BA","vulnerable":true},{"criteria":"cpe:2.3:o:qnap:qts:4.3.4.0899:*:*:*:*:*:*:*","matchCriteriaId":"98DCB45E-6024-4BB6-A40A-1CB871343930","vulnerable":true},{"criteria":"cpe:2.3:o:qnap:qts:4.3.4.1029:*:*:*:*:*:*:*","matchCriteriaId":"485AF3DC-126D-464C-A6ED-59746031BCC5","vulnerable":true},{"criteria":"cpe:2.3:o:qnap:qts:4.3.6.0895:*:*:*:*:*:*:*","matchCriteriaId":"A1AB2488-4D3D-494B-9C93-1AA3C7964644","vulnerable":true},{"criteria":"cpe:2.3:o:qnap:qts:4.3.6.0907:*:*:*:*:*:*:*","matchCriteriaId":"6C24D008-D055-4A2C-88D4-85FB6DC45EFE","vulnerable":true},{"criteria":"cpe:2.3:o:qnap:qts:4.3.6.0923:*:*:*:*:*:*:*","matchCriteriaId":"B64D1A6D-D306-46B8-B345-3D9C38544761","vulnerable":true},{"criteria":"cpe:2.3:o:qnap:qts:4.3.6.0944:*:*:*:*:*:*:*","matchCriteriaId":"067C0A13-525C-4376-A6CC-0B86F7F92670","vulnerable":true},{"criteria":"cpe:2.3:o:qnap:qts:4.3.6.0959:*:*:*:*:*:*:*","matchCriteriaId":"4BAE62E0-5FA0-4B9F-ACCA-9C8C70AC1F2C","vulnerable":true},{"criteria":"cpe:2.3:o:qnap:qts:4.3.6.0979:*:*:*:*:*:*:*","matchCriteriaId":"B6023A8C-77A8-4B79-ACC6-872E98CA0D29","vulnerable":true},{"criteria":"cpe:2.3:o:qnap:qts:4.3.6.0993:*:*:*:*:*:*:*","matchCriteriaId":"CAA72D06-4FE1-4DC3-A96B-2975A4A9AF84","vulnerable":true},{"criteria":"cpe:2.3:o:qnap:qts:4.3.6.1013:*:*:*:*:*:*:*","matchCriteriaId":"0CD59BCF-E119-4910-90CE-DCA212D146F5","vulnerable":true},{"criteria":"cpe:2.3:o:qnap:qts:4.3.6.1033:*:*:*:*:*:*:*","matchCriteriaId":"E8F01168-A599-480D-BEB1-FA0195B696E6","vulnerable":true},{"criteria":"cpe:2.3:o:qnap:qts:4.4.1.0948:beta:*:*:*:*:*:*","matchCriteriaId":"C0EDB4B0-42CD-42E4-8EA6-6C7E6946608F","vulnerable":true},{"criteria":"cpe:2.3:o:qnap:qts:4.4.1.0949:beta:*:*:*:*:*:*","matchCriteriaId":"94179DF2-2E1F-4673-B834-987BEE24242B","vulnerable":true},{"criteria":"cpe:2.3:o:qnap:qts:4.4.1.0978:beta_2:*:*:*:*:*:*","matchCriteriaId":"2768EC66-AE75-405B-B92B-547840C10D78","vulnerable":true},{"criteria":"cpe:2.3:o:qnap:qts:4.4.1.0998:beta_3:*:*:*:*:*:*","matchCriteriaId":"F83BCDD9-5227-4677-B174-65C653EEDBA1","vulnerable":true},{"criteria":"cpe:2.3:o:qnap:qts:4.4.1.0999:beta_3:*:*:*:*:*:*","matchCriteriaId":"B3AFEC02-4082-4CF2-BDEF-B42CAF6C2AAE","vulnerable":true},{"criteria":"cpe:2.3:o:qnap:qts:4.4.1.1031:beta_4:*:*:*:*:*:*","matchCriteriaId":"0E4BC7EF-8E5C-4D4A-9365-28DA0CC0E879","vulnerable":true},{"criteria":"cpe:2.3:o:qnap:qts:4.4.1.1033:beta_4:*:*:*:*:*:*","matchCriteriaId":"491637BB-CF44-43FE-8FF1-AAA22E848B64","vulnerable":true},{"criteria":"cpe:2.3:o:qnap:qts:4.4.1.1064:*:*:*:*:*:*:*","matchCriteriaId":"C0E47BAD-87AD-49AB-87B6-E5188067F961","vulnerable":true},{"criteria":"cpe:2.3:o:qnap:qts:4.4.1.1081:*:*:*:*:*:*:*","matchCriteriaId":"1FB45CEB-A2E8-454A-8BA0-7BA039E50608","vulnerable":true},{"criteria":"cpe:2.3:o:qnap:qts:4.4.1.1086:*:*:*:*:*:*:*","matchCriteriaId":"F5706EBB-06AD-433F-88E3-B273981A2F4F","vulnerable":true},{"criteria":"cpe:2.3:o:qnap:qts:4.4.1.1101:*:*:*:*:*:*:*","matchCriteriaId":"215082F9-960F-483A-99EC-9861687CB18F","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"This command injection vulnerability in File Station allows attackers to execute commands on the affected device. To fix the vulnerability, QNAP recommend updating QTS to their latest versions."},{"lang":"es","value":"Esta vulnerabilidad de inyección de comandos en File Station permite a atacantes ejecutar comandos sobre el dispositivo afectado. Para corregir la vulnerabilidad, QNAP recomienda actualizar QTS a sus últimas versiones."}],"id":"CVE-2018-0730","lastModified":"2026-06-17T01:31:32.240","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"HIGH","cvssData":{"accessComplexity":"LOW","accessVector":"NETWORK","authentication":"NONE","availabilityImpact":"PARTIAL","baseScore":7.5,"confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","version":"2.0"},"exploitabilityScore":10.0,"impactScore":6.4,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":false}],"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":3.9,"impactScore":5.9,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2019-12-04T17:16:42.993","references":[{"source":"security@qnapsecurity.com.tw","tags":["Vendor Advisory"],"url":"https://www.qnap.com/zh-tw/security-advisory/nas-201911-20"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://www.qnap.com/zh-tw/security-advisory/nas-201911-20"}],"sourceIdentifier":"security@qnapsecurity.com.tw","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-77"}],"source":"nvd@nist.gov","type":"Primary"}]}
|