CVE-2018-0707

published 2018-07-17

CVE-2018-0707: Command injection vulnerability in change password of QNAP Q'center Virtual Appliance version 1.7.1063 and earlier could allow authenticated users to run…

high 7.2 CVSS 3.0

AV N AC L PR H UI N S U C H I H A H

EXPLOIT

Command injection vulnerability in change password of QNAP Q'center Virtual Appliance version 1.7.1063 and earlier could allow authenticated users to run arbitrary commands.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
qnap	q_center	<= 1.7.1063	—
qnap	q_center_virtual_appliance	—	—

CWE-78