CVE-2021-38684CWE-787

Buffer Overflow Vulnerability in Multimedia Console

High · published November 13, 2021

CVSS v3.1
8.1
EPSS
1%
Percentile
70.7
In the wild
Unconfirmed
What it is

A stack buffer overflow vulnerability has been reported to affect QNAP NAS running Multimedia Console. If exploited, this vulnerability allows attackers to execute arbitrary code. We have already fixed this vulnerability in the following versions of Multimedia Console: Multimedia Console 1.4.3 ( 2021/10/05 ) and later Multimedia Console 1.5.3 ( 2021/10/05 ) and later

The record
Technical detail
CVSS v3.1
8.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01323 · 70.7th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2021-11-13T00:50Z
EPSS history
Timeline
  • 13 NOV 00:50Z
    Buffer Overflow Vulnerability in Multimedia Console
    cvelistv5