NetSight
IP …
medium6.7

CVE-2020-36198

A command injection vulnerability has been reported to affect certain versions of Malware Remover.

Impact

A command injection vulnerability has been reported to affect certain versions of Malware Remover. If exploited, this vulnerability allows remote attackers to execute arbitrary commands. This issue affects: QNAP Systems Inc. Malware Remover versions prior to 4.6.1.0. This issue does not affect: QNAP Systems Inc. Malware Remover 3.x.

Affected products

VendorProductAffected versions
QnapMalware Remover
from 4.5.4.0 before 4.6.1.0

Weakness classification

CWE-77CWE-78

References