CVE-2018-0714

EPSS 2.3%

Vexday Risk Score

3Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS —EPSS 2.3%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

13 Aug 2018Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

Command injection vulnerability in Helpdesk versions 1.1.21 and earlier in QNAP QTS 4.2.6 build 20180531, QTS 4.3.3 build 20180528, QTS 4.3.4 build 20180528 and their earlier versions could allow remote attackers to run arbitrary commands in the compromised application.

Affected products

QNAP · Helpdesk in QTS

References

https://www.qnap.com/zh-tw/security-advisory/nas-201808-13