GCVE-110-CERTCC-2013-927644

Advisory PublishedCVSS 10.0/10

Vulnetix · Advisory published June 5, 2013

QNAP VioStor NVR firmware version 4.0.3 and possibly earlier versions and QNAP NAS contains multiple vulnerabilities which may allow an attacker to perform administrative functions against the hosted server.

Download JSON Open in Console

Risk Scores

CVSS 2.0

10.0/10

Critical · AV:N/AC:L/Au:N/C:C/I:C/A:C

certcc-cam

impact0population0exploitation0widely_known0score_current0ease_of_exploitation0

certcc-vrda

d1_impact3d1_population3d1_direct_report1

certcc-cvss-temporal-env

temporal_score7.7remediation_levelNDreport_confidenceUCenvironmental_score1.9114471152target_distributionLenvironmental_vectorCDP:ND/TD:L/CR:ND/IR:ND/AR:ND