CVE-2018-0708: Command Injection
Published Jul 16, 2018
·Updated
Command injection vulnerability in networking of QNAP Q'center Virtual Appliance version 1.7.1063 and earlier could allow authenticated users to run arbitrary commands.
Affected Software
1 affected component
QNAP Q\'center<=1.7.1063
Event History
Jul 16, 2018
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2018-0708?
The severity of CVE-2018-0708 is considered high due to potential arbitrary command execution.
2
How do I fix CVE-2018-0708?
To fix CVE-2018-0708, you should upgrade your QNAP Q'center Virtual Appliance to version 1.7.1064 or later.
3
Who is affected by CVE-2018-0708?
CVE-2018-0708 affects QNAP Q'center Virtual Appliance version 1.7.1063 and earlier.
4
What kind of vulnerability is CVE-2018-0708?
CVE-2018-0708 is a command injection vulnerability that allows authenticated users to execute arbitrary commands.
5
Is CVE-2018-0708 exploitable remotely?
CVE-2018-0708 requires authenticated access, thus making it exploitable by users with valid credentials.