CVE-2018-0721CWE-120

Security Advisory for Vulnerabilities in QTS

High · published November 27, 2018

CVSS v3.1
7.7
EPSS
2%
Percentile
74.9
In the wild
Unconfirmed
What it is

Buffer Overflow vulnerability in NAS devices. QTS allows attackers to run arbitrary code. This issue affects: QNAP Systems Inc. QTS version 4.2.6 and prior versions on build 20180711; version 4.3.3 and prior versions on build 20180725; version 4.3.4 and prior versions on build 20180710.

The record
Technical detail
CVSS v3.1
7.7 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:H/A:L
CVSS v4.0
Not supplied
EPSS
0.01552 · 74.9th percentile
Weakness
CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Published
2018-11-27T22:00Z
EPSS history
Timeline
  • 27 NOV 22:00Z
    Security Advisory for Vulnerabilities in QTS
    cvelistv5