CVE-2020-36198: QNAP NAS Malware Remover Command Injection Privilege Escalation Vulnerability
A command injection vulnerability has been reported to affect certain versions of Malware Remover. If exploited, this vulnerability allows remote attackers to execute arbitrary commands. This issue affects: QNAP Systems Inc. Malware Remover versions prior to 4.6.1.0. This issue does not affect: QNAP Systems Inc. Malware Remover 3.x.
Other sources
This vulnerability allows local attackers to escalate privileges on affected installations of QNAP NAS. Authentication is required to exploit this vulnerability. The specific flaw exists within the Malware Remover application. A crafted TAR file in the file system can trigger execution of a system call composed from a user-supplied string. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the admin user.
— ZDI
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is CVE-2020-36198?
CVE-2020-36198 is a vulnerability that allows local attackers to escalate privileges on affected installations of QNAP NAS.
How does CVE-2020-36198 affect QNAP NAS?
CVE-2020-36198 affects QNAP NAS by allowing local attackers to escalate privileges.
Is authentication required to exploit CVE-2020-36198?
Yes, authentication is required to exploit CVE-2020-36198.
Which application is affected by CVE-2020-36198?
The Malware Remover application is affected by CVE-2020-36198.
How can I fix CVE-2020-36198?
To fix CVE-2020-36198, update your QNAP NAS to version 4.6.1.0 or later.