Lucene search
QnapCVELIST:CVE-2020-2490HistoryNov 16, 2020 - 12:56 a.m.
CVE-2020-2490
2020-11-1600:56:21
CWE-78
CWE-77
qnap
www.cve.org
3
command injection
remote attackers
qnap systems inc.
CVSS3
7.2
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
AI Score
7.4
Confidence
High
EPSS
0.001
Percentile
49.2%
If exploited, the command injection vulnerability could allow remote attackers to execute arbitrary commands. This issue affects: QNAP Systems Inc. QTS versions prior to 4.4.3.1421 on build 20200907.
CNA Affected
[
{
"platforms": [
"build 20200907"
],
"product": "QTS",
"vendor": "QNAP Systems Inc.",
"versions": [
{
"lessThan": "4.4.3.1421",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
}
]Related
cve
cve
CVE-2020-2490
2020-11-16 01:15:12
nvd
nvd
CVE-2020-2490
2020-11-16 01:15:12
prion
prion
Command injection
2020-11-16 01:15:00
openvas
openvas
QNAP QTS Multiple Vulnerabilities (QSA-20-09)
2020-11-17 00:00:00
CVSS3
7.2
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
AI Score
7.4
Confidence
High
EPSS
0.001
Percentile
49.2%
Related for CVELIST:CVE-2020-2490