CVE-2017-13071

Critical

Published: 22/11/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

CVE-2017-13071 allows a remote attacker to execute arbitrary commands on QNAP Video Station versions 5.1.3 (for QTS 4.3.3), 5.2.0 (for QTS 4.3.4), and earlier.

Risk Assessment

This vulnerability could lead to unauthorized control over the system, posing a significant risk to data security.

Recommendation

It is recommended to update the software to the latest version to mitigate this vulnerability.

Original NVD description (English source)

QNAP has already patched this vulnerability. This security concern allows a remote attacker to run arbitrary commands on the QNAP Video Station 5.1.3 (for QTS 4.3.3), 5.2.0 (for QTS 4.3.4), and earlier.