CVE-2017-6361

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• QNAP TVS-663 QTS < 4.2.4 build 20170313 - Command Injection2017-04-07 · webapps · cgi · Verified

Impact

QNAP QTS before 4.2.4 Build 20170313 allows attackers to execute arbitrary commands via unspecified vectors.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• http://www.securityfocus.com/bid/97059
• http://www.securityfocus.com/bid/97072
• http://www.securitytracker.com/id/1038091
• https://www.exploit-db.com/exploits/41842/
• https://www.qnap.com/en/support/con_show.php?cid=113
• http://www.securityfocus.com/bid/97059
• http://www.securityfocus.com/bid/97072
• http://www.securitytracker.com/id/1038091
• https://www.exploit-db.com/exploits/41842/
• https://www.qnap.com/en/support/con_show.php?cid=113