CVE-2018-19945

Critical

Description

A vulnerability has been reported to affect earlier QNAP devices running QTS 4.3.4 to 4.3.6. Caused by improper limitations of a pathname to a restricted directory, this vulnerability allows for renaming arbitrary files on the target system, if exploited. QNAP have already fixed this vulnerability in the following versions: QTS 4.3.6.0895 build 20190328 (and later) QTS 4.3.4.0899 build 20190322 (and later) This issue does not affect QTS 4.4.x or QTS 4.5.x.

SeverityCritical

CVSS9.1

Exploit probability66. percentile1.1%

Product

Qnap Qts

PublishedDec 31, 2020

First seenDec 31, 2020

Weakness typeCWE-20Improper input validation CWE-22Path traversal CWE-73CWE-73 CWE-284Improper access control

How to fix

Update

qnap qts4.3.4.0899, 4.3.6.0895 or later

Affected products

Product	Affected versions	Fixed in
qnap qts	4.3.4 ≤ v < 4.3.4.0899, 4.3.5 ≤ v < 4.3.6.0895	4.3.4.0899, 4.3.6.0895

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.