CVE Catalog
CVE-2017-10700
CriticalSummary
In the medialibrary component in QNAP NAS version 4.3.3.0229, an unauthenticated remote attacker can execute arbitrary system commands as the root user of the NAS application.
Risk Assessment
An attacker can gain full control over the system, leading to serious threats to data security and the organization's infrastructure.
Recommendation
It is recommended to update the NAS software to the latest version to mitigate this vulnerability and implement additional security measures.
Original NVD description (English source)
In the medialibrary component in QNAP NAS 4.3.3.0229, an un-authenticated, remote attacker can execute arbitrary system commands as the root user of the NAS application.