Security Advisory

CVE-2013-0143

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2013-06-07 20:00:00

Last updated 2024-09-17 00:51:53

Assigner certcc

CVSS score not scored

State PUBLISHED

Description

cgi-bin/pingping.cgi on QNAP VioStor NVR devices with firmware 4.0.3, and in the Surveillance Station Pro component in QNAP NAS, allows remote authenticated users to execute arbitrary commands by leveraging guest access and placing shell metacharacters in the query string.

← Browse all CVEs View on cve.org ↗