CVE-2013-0143: Code Injection
cgi-bin/pingping.cgi on QNAP VioStor NVR devices with firmware 4.0.3, and in the Surveillance Station Pro component in QNAP NAS, allows remote authenticated users to execute arbitrary commands by leveraging guest access and placing shell metacharacters in the query string.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-0143?
CVE-2013-0143 is considered a high severity vulnerability due to the potential for arbitrary command execution by remote authenticated users.
How can I mitigate CVE-2013-0143?
To mitigate CVE-2013-0143, it is recommended to update the firmware of QNAP VioStor NVR devices and QNAP NAS to the latest versions.
Who is affected by CVE-2013-0143?
CVE-2013-0143 affects users of QNAP VioStor NVR devices running firmware version 4.0.3 and users of the Surveillance Station Pro component on QNAP NAS.
What kind of attacks can be executed through CVE-2013-0143?
CVE-2013-0143 allows remote authenticated users to execute arbitrary commands on the affected devices, leading to potential system compromise.
Is there a workaround for CVE-2013-0143?
As a temporary workaround for CVE-2013-0143, it is advisable to revoke guest access and restrict user permissions on the affected devices.