CVE-2017-17031

EUVD-2017-8201
A buffer overflow vulnerability in password function in QNAP QTS version 4.2.6 build 20171026, 4.3.3.0378 build 20171117, 4.3.4.0387 (Beta 2) build 20171116 and earlier could allow remote attackers to execute arbitrary code on NAS devices.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 86%
Affected Products (NVD)
VendorProductVersion
qnapqts
𝑥
≤ 4.3.3.0378
qnapqts
4.3.4.0358:beta1
qnapqts
4.3.4.0370:beta1
qnapqts
4.3.4.0372:beta1
qnapqts
4.3.4.0374:beta1
qnapqts
4.3.4.0387:beta2
𝑥
= Vulnerable software versions