high7.4
CVE-2020-7847
The ipTIME NAS product allows an arbitrary file upload vulnerability in the Manage Bulletins/Upload feature, which can be leveraged to gain remote code executi…
Impact
The ipTIME NAS product allows an arbitrary file upload vulnerability in the Manage Bulletins/Upload feature, which can be leveraged to gain remote code execution. This issue affects: pTIME NAS 1.4.36.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Iptime | Nas-I Firmware | before 1.4.36 |
| Iptime | Nas-Ii Firmware | before 1.4.36 |
| Iptime | Nas-Iie Firmware | before 1.4.36 |
| Iptime | Nas101 Firmware | before 1.4.36 |
| Iptime | Nas1dual Firmware | before 1.4.36 |
| Iptime | Nas2dual Firmware | before 1.4.36 |
| Iptime | Nas3 Firmware | before 1.4.36 |
| Iptime | Nas4 Firmware | before 1.4.36 |
| Iptime | Nas4dual Firmware | before 1.4.36 |