Signature Detail
This site is deprecated. Please CLICK HERE for latest updates
Short Name |
HTTP:QNAP-MULT-VULN |
|---|---|
Severity |
Major |
Recommended |
No |
Recommended Action |
Drop |
Category |
HTTP |
Keywords |
QNAP Multiple Vulnerabilities |
Release Date |
2018/06/05 |
Update Number |
3070 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-11.4+, srx-12.1+, srx-branch-12.1+, vmx-17.4+, vsrx-12.1+, vsrx3bsd-18.2+ |
HTTP: QNAP Multiple Vulnerabilities
This signature detects attempts to exploit a known vulnerability in QNAP devices.
Extended Description
cgi-bin/pingping.cgi on QNAP VioStor NVR devices with firmware 4.0.3, and in the Surveillance Station Pro component in QNAP NAS, allows remote authenticated users to execute arbitrary commands by leveraging guest access and placing shell metacharacters in the query string.
Affected Products
- Qnap nas -
- Qnap surveillance_station_pro -
- Qnap viostor_network_video_recorder -
- Qnap viostor_network_video_recorder 4.0.3
References
- CVE: CVE-2013-0143