EDB-41842

functional

QNAP TVS-663 QTS < 4.2.4 build 20170313 - Command Injection

view exploit source exploit_dbverifiedtype webappsauthor Harry Sintonenpublished 2017-04-07catalog exploit_db

exploited CVEs (3)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2017-6361US	critical9.8	56.8% (99th)	Exploit	2017-03-23
QNAP QTS before 4.2.4 Build 20170313 allows attackers to execute arbitrary commands via unspecified vectors.
CVE-2017-6360US	critical9.8	66.1% (99th)	Exploit	2017-03-23
QNAP QTS before 4.2.4 Build 20170313 allows attackers to gain administrator privileges and obtain sensitive information via unspecified vectors.
CVE-2017-6359US	critical9.8	26.9% (98th)	Exploit	2017-03-23
QNAP QTS before 4.2.4 Build 20170313 allows attackers to gain administrator privileges and execute arbitrary commands via unspecified vectors.

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.