by Kastro
Paper/Archive/CVE-2021-38684

CVE-2021-38684

QNAP Systems Inc. Multimedia Console — Buffer Overflow Vulnerability in Multimedia Console

EPSS 1%CVSS 9.8
critical.is priorityof 100
44
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 70.9.709 × 2014.2No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

A stack buffer overflow vulnerability has been reported to affect QNAP NAS running Multimedia Console. If exploited, this vulnerability allows attackers to execute arbitrary code. We have already fixed this vulnerability in the following versions of Multimedia Console: Multimedia Console 1.4.3 ( 2021/10/05 ) and later Multimedia Console 1.5.3 ( 2021/10/05 ) and later

Affected

ProductAffectedFixed inSource
Multimedia Consoleunspecified – < 1.4.3 ( 2021/10/05 )1.4.3 ( 2021/10/05 )CNA
Multimedia Consoleunspecified – < 1.5.3 ( 2021/10/05 )1.5.3 ( 2021/10/05 )CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
qnap (CNA)8.1CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refqnap.com/en/security-advisory/qsa-21-45