← back
CVE-2017-17027

CVE-2017-17027

EPSS 3.3%
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 3.3%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
21 Dec 2017Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
A buffer overflow vulnerability in FTP service in QNAP QTS version 4.2.6 build 20171026, 4.3.3.0378 build 20171117, 4.3.4.0387 (Beta 2) build 20171116 and earlier could allow remote attackers to execute arbitrary code on NAS devices.
Affected products
QNAP · QTS FTP service
References
https://www.qnap.com/zh-tw/security-advisory/nas-201712-15http://www.securitytracker.com/id/1040018