CVE-2018-0707: Command Injection
Published Jul 16, 2018
·Updated
Command injection vulnerability in change password of QNAP Q'center Virtual Appliance version 1.7.1063 and earlier could allow authenticated users to run arbitrary commands.
Affected Software
1 affected component
QNAP Q\'center<=1.7.1063
Event History
Jul 16, 2018
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2018-0707?
CVE-2018-0707 is classified as a high severity vulnerability due to its potential for command injection.
2
How do I fix CVE-2018-0707?
To fix CVE-2018-0707, upgrade to QNAP Q'center Virtual Appliance version 1.7.1064 or later.
3
Who is affected by CVE-2018-0707?
CVE-2018-0707 affects authenticated users of QNAP Q'center Virtual Appliance versions up to 1.7.1063.
4
What type of vulnerability is CVE-2018-0707?
CVE-2018-0707 is a command injection vulnerability that allows attackers to execute arbitrary commands.
5
What could an attacker achieve using CVE-2018-0707?
An attacker exploiting CVE-2018-0707 could gain unauthorized access to the system and execute commands.