Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 03/06/2021 Updated: 18/10/2022

CVSS v2 Base Score: 6.5 | Impact Score: 6.4 | Exploitability Score: 8

CVSS v3 Base Score: 8.8 | Impact Score: 5.9 | Exploitability Score: 2.8

VMScore: 578

Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P

A command injection vulnerability has been reported to affect certain versions of Video Station. If exploited, this vulnerability allows remote malicious users to execute arbitrary commands. This issue affects: QNAP Systems Inc. Video Station versions before 5.5.4 on QTS 4.5.2; versions before 5.5.4 on QuTS hero h4.5.2; versions before 5.5.4 on QuTScloud c4.5.4. This issue does not affect: QNAP Systems Inc. Video Station on QTS 4.3.6; on QTS 4.3.3.

Vulnerable Product	Search on Vulmon	Subscribe to Product
qnap video_station

CWE-77 https://www.qnap.com/zh-tw/security-advisory/qsa-21-21 https://nvd.nist.gov

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2021-28812

Vulnerability Summary

Vulnerability Trend

References

Vulmon Search

About

Products

Connect