CVE-2021-38684: Buffer Overflow Vulnerability in Multimedia Console

Q: What is CVE-2021-38684?

CVE-2021-38684 is a stack buffer overflow vulnerability that affects QNAP NAS running Multimedia Console.

Q: What is the severity of CVE-2021-38684?

CVE-2021-38684 has a severity of 9.8 (Critical).

Q: How does CVE-2021-38684 impact QNAP NAS running Multimedia Console?

CVE-2021-38684 allows attackers to execute arbitrary code on QNAP NAS running Multimedia Console.

Q: Which versions of Multimedia Console are affected by CVE-2021-38684?

Versions 1.4.3 and 1.5.2 of Multimedia Console are affected by CVE-2021-38684.

Q: How can I fix CVE-2021-38684?

To fix CVE-2021-38684, update Multimedia Console to version 1.4.3 or later.

Published Nov 13, 2021

Updated

A stack buffer overflow vulnerability has been reported to affect QNAP NAS running Multimedia Console. If exploited, this vulnerability allows attackers to execute arbitrary code. We have already fixed this vulnerability in the following versions of Multimedia Console: Multimedia Console 1.4.3 ( 2021/10/05 ) and later Multimedia Console 1.5.3 ( 2021/10/05 ) and later

Affected Software

2 affected components

QNAP Multimedia Console<1.4.3

QNAP Multimedia Console=1.5.2

Remediation

Information

We have already fixed this vulnerability in the following versions of Multimedia Console: Multimedia Console 1.4.3 ( 2021/10/05 ) and later Multimedia Console 1.5.3 ( 2021/10/05 ) and later

Event History

Nov 13, 2021

CVE Published

via MITRE·12:50 AM

Data Sourced

via MITRE·12:50 AM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

What is CVE-2021-38684?

CVE-2021-38684 is a stack buffer overflow vulnerability that affects QNAP NAS running Multimedia Console.

What is the severity of CVE-2021-38684?