CVE-2018-0729: Command Injection
Published Dec 4, 2019
·Updated
This command injection vulnerability in Music Station allows attackers to execute commands on the affected device. To fix the vulnerability, QNAP recommend updating Music Station to their latest versions.
Affected Software
9 affected components
QNAP Music Station<5.3.5
QNAP QTS=4.4.1
QNAP Music Station<5.2.7
QNAP QTS=4.3.6
QNAP Music Station<5.1.11
QNAP QTS=4.3.4
QNAP QTS=4.3.3
QNAP Music Station<4.8.8
QNAP QTS=4.2.6
Event History
Dec 4, 2019
CVE Published
via MITRE·04:33 PM
Data Sourced
via MITRE·04:33 PM
DescriptionWeakness
Frequently Asked Questions
1
What is CVE-2018-0729?
CVE-2018-0729 is a command injection vulnerability in Music Station that allows attackers to execute commands on the affected device.
2
How can I fix CVE-2018-0729?
To fix CVE-2018-0729, QNAP recommends updating Music Station to their latest versions.
3
What is the severity of CVE-2018-0729?
The severity of CVE-2018-0729 is critical with a CVSS score of 9.8.
4
What software versions are affected by CVE-2018-0729?
Music Station versions up to exclusive 5.3.5 and 5.2.7 are affected by CVE-2018-0729.
5
Is QNAP QTS vulnerable to CVE-2018-0729?
No, QNAP QTS version 4.4.1, 4.3.6, 4.3.4, and 4.3.3 are not vulnerable to CVE-2018-0729.