Vulnerability Details CVE-2018-19946
The vulnerability have been reported to affect earlier versions of Helpdesk. If exploited, this improper certificate validation vulnerability could allow an attacker to spoof a trusted entity by interfering in the communication path between the host and client. QNAP has already fixed the issue in Helpdesk 3.0.3 and later.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 29.0%
CVSS Severity
CVSS v3 Score 4.2
CVSS v2 Score 4.3
Products affected by CVE-2018-19946
-
cpe:2.3:a:qnap:helpdesk:-
-
cpe:2.3:a:qnap:helpdesk:1.0.06
-
cpe:2.3:a:qnap:helpdesk:1.0.10
-
cpe:2.3:a:qnap:helpdesk:1.0.12
-
cpe:2.3:a:qnap:helpdesk:1.0.14
-
cpe:2.3:a:qnap:helpdesk:1.1.01
-
cpe:2.3:a:qnap:helpdesk:1.1.02
-
cpe:2.3:a:qnap:helpdesk:1.1.04
-
cpe:2.3:a:qnap:helpdesk:1.1.10
-
cpe:2.3:a:qnap:helpdesk:1.1.12
-
cpe:2.3:a:qnap:helpdesk:1.1.15
-
cpe:2.3:a:qnap:helpdesk:1.1.16
-
cpe:2.3:a:qnap:helpdesk:1.1.17
-
cpe:2.3:a:qnap:helpdesk:1.1.18
-
cpe:2.3:a:qnap:helpdesk:1.1.19
-
cpe:2.3:a:qnap:helpdesk:1.1.20
-
cpe:2.3:a:qnap:helpdesk:1.1.21
-
cpe:2.3:a:qnap:helpdesk:1.2
-
cpe:2.3:a:qnap:helpdesk:1.2.1
-
cpe:2.3:a:qnap:helpdesk:1.2.2
-
cpe:2.3:a:qnap:helpdesk:1.2.3
-
cpe:2.3:a:qnap:helpdesk:1.2.4
-
cpe:2.3:a:qnap:helpdesk:2.0.0
-
cpe:2.3:a:qnap:helpdesk:2.0.1
-
cpe:2.3:a:qnap:helpdesk:2.1.0
-
cpe:2.3:a:qnap:helpdesk:3.0.0
-
cpe:2.3:a:qnap:helpdesk:3.0.1