CVE-2018-0721: Security Advisory for Vulnerabilities in QTS
Published Nov 27, 2018
·Updated
Buffer Overflow vulnerability in NAS devices. QTS allows attackers to run arbitrary code. This issue affects: QNAP Systems Inc. QTS version 4.2.6 and prior versions on build 20180711; version 4.3.3 and prior versions on build 20180725; version 4.3.4 and prior versions on build 20180710.
Affected Software
3 affected components
QNAP QTS=4.2.6
QNAP QTS=4.3.3
QNAP QTS=4.3.4
Event History
Nov 27, 2018
CVE Published
via MITRE·10:00 PM
Data Sourced
via MITRE·10:00 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2018-0721?
CVE-2018-0721 is classified as a high-severity buffer overflow vulnerability.
2
How do I fix CVE-2018-0721?
To fix CVE-2018-0721, update your QTS to version 4.3.4 or later.
3
Which QNAP versions are affected by CVE-2018-0721?
CVE-2018-0721 affects QNAP QTS versions 4.2.6, 4.3.3, and 4.3.4 prior to specific builds.
4
What impact does CVE-2018-0721 have on QNAP devices?
CVE-2018-0721 allows attackers to execute arbitrary code on affected NAS devices.
5
Is there a known exploitation method for CVE-2018-0721?
Yes, attackers can exploit CVE-2018-0721 through crafted inputs that trigger a buffer overflow.