CVE-2017-13067 | BDVDB-2026-90473 Detail

Description#

QNAP has patched a remote code execution vulnerability affecting the QTS Media Library in all versions prior to QTS 4.2.6 build 20170905 and QTS 4.3.3.0299 build 20170901. This particular vulnerability allows a remote attacker to execute commands on a QNAP NAS using a transcoding service on port 9251. A remote user does not require any privileges to successfully execute an attack.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12017-09-14Record published in the CVE List.
2. Version 22024-09-17Most recent update recorded in the CVE List.