CVE-2013-0143

cgi-bin/pingping.cgi on QNAP VioStor NVR devices with firmware 4.0.3, and in the Surveillance Station Pro component in QNAP NAS, allows remote authenticated…

published June 7, 2013

CVSS
—
EPSS
7%
Percentile
94.1
In the wild
Unconfirmed
What it is

cgi-bin/pingping.cgi on QNAP VioStor NVR devices with firmware 4.0.3, and in the Surveillance Station Pro component in QNAP NAS, allows remote authenticated users to execute arbitrary commands by leveraging guest access and placing shell metacharacters in the query string.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06965 · 94.1th percentile
Published
2013-06-07T20:00Z
EPSS history
Timeline
  • 07 JUN 20:00Z
    cgi-bin/pingping.cgi on QNAP VioStor NVR devices with firmware 4.0.3, and in the Surveillance Station Pro component in QNAP NAS, allows remote authenticated…
    cvelistv5