CVE-2017-13069

Critical

Published: 06/10/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

A number of command injection vulnerabilities were discovered in Music Station versions 4.8.6 (for QTS 4.2.x), 5.0.7 (for QTS 4.3.x), and earlier. If exploited, these vulnerabilities may allow a remote attacker to run arbitrary commands on the NAS.

Risk Assessment

These vulnerabilities could lead to unauthorized access and control over the NAS system, posing a serious threat to the organization's data security.

Recommendation

It is recommended to update Music Station to the latest version to mitigate these vulnerabilities and to monitor the system for potential attack attempts.

Original NVD description (English source)

QNAP discovered a number of command injection vulnerabilities found in Music Station versions 4.8.6 (for QTS 4.2.x), 5.0.7 (for QTS 4.3.x), and earlier. If exploited, these vulnerabilities may allow a remote attacker to run arbitrary commands on the NAS.