CVE-2021-34344: Stack Buffer Overflow Vulnerability in QUSBCam2

Q: What is the vulnerability ID?

The vulnerability ID is CVE-2021-34344.

Q: What is the severity of CVE-2021-34344?

CVE-2021-34344 has a severity level of 9.8, which is considered critical.

Q: Which software is affected by CVE-2021-34344?

The QNAP device running QUSBCam2 with versions up to and excluding 1.1.4 is affected by CVE-2021-34344.

Q: How can CVE-2021-34344 be exploited?

If exploited, CVE-2021-34344 allows attackers to execute arbitrary code.

Q: Has CVE-2021-34344 been fixed?

Yes, CVE-2021-34344 has been fixed in the following versions of QUSBCam2: QTS 4.5.4: QUSBCam2 1.1.4.

Published Sep 10, 2021

Updated

A stack buffer overflow vulnerability has been reported to affect QNAP device running QUSBCam2. If exploited, this vulnerability allows attackers to execute arbitrary code. We have already fixed this vulnerability in the following versions of QUSBCam2: QTS 4.5.4: QUSBCam2 1.1.4 ( 2021/07/30 ) and later QTS 5.0: QUSBCam2 2.0.1 ( 2021/08/03 ) and later QTS 4.3.6: QUSBCam2 1.1.4 ( 2021/07/30 ) and later QTS 4.3.3: QUSBCam2 1.1.4 ( 2021/08/06 ) and later QuTS hero 4.5.3: QUSBCam2 1.1.4 ( 2021/07/30 ) and later

Affected Software

4 affected components

QNAP QUSBCam2<1.1.4

QNAP QTS=4.3.6

QNAP QTS=4.5.4

QNAP QuTS hero=h4.5.3

Remediation

Information

We have already fixed this vulnerability in the following versions of QUSBCam2: QTS 4.5.4: QUSBCam2 1.1.4 ( 2021/07/30 ) and later QTS 5.0: QUSBCam2 2.0.1 ( 2021/08/03 ) and later QTS 4.3.6: QUSBCam2 1.1.4 ( 2021/07/30 ) and later QTS 4.3.3: QUSBCam2 1.1.4 ( 2021/08/06 ) and later QuTS hero 4.5.3: QUSBCam2 1.1.4 ( 2021/07/30 ) and later

Event History

Sep 10, 2021

CVE Published

via MITRE·04:00 AM

Data Sourced

via MITRE·04:00 AM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

What is the vulnerability ID?

The vulnerability ID is CVE-2021-34344.

What is the severity of CVE-2021-34344?