CVE-2020-36197CWE-284

Improper Access Control Vulnerability in Music Station

High · published May 13, 2021

CVSS v3.1
7.1
EPSS
18%
Percentile
97.2
In the wild
Unconfirmed
What it is

An improper access control vulnerability has been reported to affect earlier versions of Music Station. If exploited, this vulnerability allows attackers to compromise the security of the software by gaining privileges, reading sensitive information, executing commands, evading detection, etc. This issue affects: QNAP Systems Inc. Music Station versions prior to 5.3.16 on QTS 4.5.2; versions prior to 5.2.10 on QTS 4.3.6; versions prior to 5.1.14 on QTS 4.3.3; versions prior to 5.3.16 on QuTS hero h4.5.2; versions prior to 5.3.16 on QuTScloud c4.5.4.

The record
Technical detail
CVSS v3.1
7.1 · HIGH
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
CVSS v4.0
Not supplied
EPSS
0.18497 · 97.2th percentile
Weakness
CWE-284 · Improper Access Control
Published
2021-05-13T02:55Z
EPSS history
Timeline
  • 13 MAY 02:55Z
    Improper Access Control Vulnerability in Music Station
    cvelistv5