ByteOS Network

NVD Vulnerability Details :

CVE-2017-7638

Analyzed

Source-security@qnapsecurity.com.tw

Published At-08 Mar, 2018 | 14:29

Updated At-27 Mar, 2018 | 17:16

QNAP NAS application Media Streaming add-on version 421.1.0.2, 430.1.2.0, and earlier does not authenticate requests properly. Successful exploitation could lead to change of the Media Streaming settings, and leakage of sensitive information of the QNAP NAS.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.0	6.5	MEDIUM	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Primary	2.0	6.4	MEDIUM	AV:N/AC:L/Au:N/C:P/I:P/A:N

CPE Matches

QNAP Systems, Inc.

>>media_streaming_add-on>>Versions up to 430.1.2.0(inclusive)

cpe:2.3:a:qnap:media_streaming_add-on:*:*:*:*:*:*:*:*

QNAP Systems, Inc.

>>qts>>4.3.3

cpe:2.3:o:qnap:qts:4.3.3:*:*:*:*:*:*:*

QNAP Systems, Inc.

>>media_streaming_add-on>>Versions up to 421.1.0.2(inclusive)

cpe:2.3:a:qnap:media_streaming_add-on:*:*:*:*:*:*:*:*

QNAP Systems, Inc.

>>qts>>Versions up to 4.2.6(inclusive)

cpe:2.3:o:qnap:qts:*:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-287	Primary	nvd@nist.gov

References

Hyperlink	Source	Resource
https://www.qnap.com/zh-tw/security-advisory/nas-201803-08	security@qnapsecurity.com.tw	Vendor Advisory

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History