Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2018-19949

If exploited, this command injection vulnerability could allow remote attackers to run arbitrary commands. QNAP has already fixed the issue in the following QTS versions. QTS 4.4.2.1231 on build 20200302; QTS 4.4.1.1201 on build 20200130; QTS 4.3.6.1218 on build 20200214; QTS 4.3.4.1190 on build 20200107; QTS 4.3.3.1161 on build 20200109; QTS 4.2.6 on build 20200109.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.692
EPSS Ranking 98.5%
CVSS Severity
CVSS v3 Score 9.8
CVSS v2 Score 7.5
Proposed Action
A command injection vulnerability affecting QNAP NAS File Station could allow remote attackers to run commands.
Ransomware Campaign
Known
Products affected by CVE-2018-19949
  • Qnap » Qts » Version: N/A
    cpe:2.3:o:qnap:qts:-
  • Qnap » Qts » Version: 4.0
    cpe:2.3:o:qnap:qts:4.0
  • Qnap » Qts » Version: 4.0.3
    cpe:2.3:o:qnap:qts:4.0.3
  • Qnap » Qts » Version: 4.1.0
    cpe:2.3:o:qnap:qts:4.1.0
  • Qnap » Qts » Version: 4.1.1
    cpe:2.3:o:qnap:qts:4.1.1
  • Qnap » Qts » Version: 4.1.4
    cpe:2.3:o:qnap:qts:4.1.4
  • Qnap » Qts » Version: 4.2.0
    cpe:2.3:o:qnap:qts:4.2.0
  • Qnap » Qts » Version: 4.2.1
    cpe:2.3:o:qnap:qts:4.2.1
  • Qnap » Qts » Version: 4.2.2
    cpe:2.3:o:qnap:qts:4.2.2
  • Qnap » Qts » Version: 4.2.3
    cpe:2.3:o:qnap:qts:4.2.3
  • Qnap » Qts » Version: 4.2.4
    cpe:2.3:o:qnap:qts:4.2.4
  • Qnap » Qts » Version: 4.2.6
    cpe:2.3:o:qnap:qts:4.2.6
  • Qnap » Qts » Version: 4.3.1.0013
    cpe:2.3:o:qnap:qts:4.3.1.0013
  • Qnap » Qts » Version: 4.3.1.0023
    cpe:2.3:o:qnap:qts:4.3.1.0023
  • Qnap » Qts » Version: 4.3.2.0050
    cpe:2.3:o:qnap:qts:4.3.2.0050
  • Qnap » Qts » Version: 4.3.2.0060
    cpe:2.3:o:qnap:qts:4.3.2.0060
  • Qnap » Qts » Version: 4.3.2.0144
    cpe:2.3:o:qnap:qts:4.3.2.0144
  • Qnap » Qts » Version: 4.3.3
    cpe:2.3:o:qnap:qts:4.3.3
  • Qnap » Qts » Version: 4.3.3.0095
    cpe:2.3:o:qnap:qts:4.3.3.0095
  • Qnap » Qts » Version: 4.3.3.0096
    cpe:2.3:o:qnap:qts:4.3.3.0096
  • Qnap » Qts » Version: 4.3.3.0136
    cpe:2.3:o:qnap:qts:4.3.3.0136
  • Qnap » Qts » Version: 4.3.3.0154
    cpe:2.3:o:qnap:qts:4.3.3.0154
  • Qnap » Qts » Version: 4.3.3.0174
    cpe:2.3:o:qnap:qts:4.3.3.0174
  • Qnap » Qts » Version: 4.3.3.0188
    cpe:2.3:o:qnap:qts:4.3.3.0188
  • Qnap » Qts » Version: 4.3.3.0210
    cpe:2.3:o:qnap:qts:4.3.3.0210
  • Qnap » Qts » Version: 4.3.3.0229
    cpe:2.3:o:qnap:qts:4.3.3.0229
  • Qnap » Qts » Version: 4.3.3.0238
    cpe:2.3:o:qnap:qts:4.3.3.0238
  • Qnap » Qts » Version: 4.3.3.0262
    cpe:2.3:o:qnap:qts:4.3.3.0262
  • Qnap » Qts » Version: 4.3.3.0299
    cpe:2.3:o:qnap:qts:4.3.3.0299
  • Qnap » Qts » Version: 4.3.3.0351
    cpe:2.3:o:qnap:qts:4.3.3.0351
  • Qnap » Qts » Version: 4.3.3.0353
    cpe:2.3:o:qnap:qts:4.3.3.0353
  • Qnap » Qts » Version: 4.3.3.0361
    cpe:2.3:o:qnap:qts:4.3.3.0361
  • Qnap » Qts » Version: 4.3.3.0369
    cpe:2.3:o:qnap:qts:4.3.3.0369
  • Qnap » Qts » Version: 4.3.3.0378
    cpe:2.3:o:qnap:qts:4.3.3.0378
  • Qnap » Qts » Version: 4.3.3.0396
    cpe:2.3:o:qnap:qts:4.3.3.0396
  • Qnap » Qts » Version: 4.3.3.0404
    cpe:2.3:o:qnap:qts:4.3.3.0404
  • Qnap » Qts » Version: 4.3.3.0416
    cpe:2.3:o:qnap:qts:4.3.3.0416
  • Qnap » Qts » Version: 4.3.3.0418
    cpe:2.3:o:qnap:qts:4.3.3.0418
  • Qnap » Qts » Version: 4.3.3.0448
    cpe:2.3:o:qnap:qts:4.3.3.0448
  • Qnap » Qts » Version: 4.3.3.0514
    cpe:2.3:o:qnap:qts:4.3.3.0514
  • Qnap » Qts » Version: 4.3.3.0546
    cpe:2.3:o:qnap:qts:4.3.3.0546
  • Qnap » Qts » Version: 4.3.3.0570
    cpe:2.3:o:qnap:qts:4.3.3.0570
  • Qnap » Qts » Version: 4.3.3.0868
    cpe:2.3:o:qnap:qts:4.3.3.0868
  • Qnap » Qts » Version: 4.3.3.0998
    cpe:2.3:o:qnap:qts:4.3.3.0998
  • Qnap » Qts » Version: 4.3.3.1051
    cpe:2.3:o:qnap:qts:4.3.3.1051
  • Qnap » Qts » Version: 4.3.3.1098
    cpe:2.3:o:qnap:qts:4.3.3.1098
  • Qnap » Qts » Version: 4.3.4
    cpe:2.3:o:qnap:qts:4.3.4
  • Qnap » Qts » Version: 4.3.4.0358
    cpe:2.3:o:qnap:qts:4.3.4.0358
  • Qnap » Qts » Version: 4.3.4.0370
    cpe:2.3:o:qnap:qts:4.3.4.0370
  • Qnap » Qts » Version: 4.3.4.0372
    cpe:2.3:o:qnap:qts:4.3.4.0372
  • Qnap » Qts » Version: 4.3.4.0374
    cpe:2.3:o:qnap:qts:4.3.4.0374
  • Qnap » Qts » Version: 4.3.4.0387
    cpe:2.3:o:qnap:qts:4.3.4.0387
  • Qnap » Qts » Version: 4.3.4.0411
    cpe:2.3:o:qnap:qts:4.3.4.0411
  • Qnap » Qts » Version: 4.3.4.0416
    cpe:2.3:o:qnap:qts:4.3.4.0416
  • Qnap » Qts » Version: 4.3.4.0427
    cpe:2.3:o:qnap:qts:4.3.4.0427
  • Qnap » Qts » Version: 4.3.4.0434
    cpe:2.3:o:qnap:qts:4.3.4.0434
  • Qnap » Qts » Version: 4.3.4.0435
    cpe:2.3:o:qnap:qts:4.3.4.0435
  • Qnap » Qts » Version: 4.3.4.0451
    cpe:2.3:o:qnap:qts:4.3.4.0451
  • Qnap » Qts » Version: 4.3.4.0483
    cpe:2.3:o:qnap:qts:4.3.4.0483
  • Qnap » Qts » Version: 4.3.4.0486
    cpe:2.3:o:qnap:qts:4.3.4.0486
  • Qnap » Qts » Version: 4.3.4.0506
    cpe:2.3:o:qnap:qts:4.3.4.0506
  • Qnap » Qts » Version: 4.3.4.0516
    cpe:2.3:o:qnap:qts:4.3.4.0516
  • Qnap » Qts » Version: 4.3.4.0526
    cpe:2.3:o:qnap:qts:4.3.4.0526
  • Qnap » Qts » Version: 4.3.4.0551
    cpe:2.3:o:qnap:qts:4.3.4.0551
  • Qnap » Qts » Version: 4.3.4.0557
    cpe:2.3:o:qnap:qts:4.3.4.0557
  • Qnap » Qts » Version: 4.3.4.0561
    cpe:2.3:o:qnap:qts:4.3.4.0561
  • Qnap » Qts » Version: 4.3.4.0569
    cpe:2.3:o:qnap:qts:4.3.4.0569
  • Qnap » Qts » Version: 4.3.4.0593
    cpe:2.3:o:qnap:qts:4.3.4.0593
  • Qnap » Qts » Version: 4.3.4.0597
    cpe:2.3:o:qnap:qts:4.3.4.0597
  • Qnap » Qts » Version: 4.3.4.0604
    cpe:2.3:o:qnap:qts:4.3.4.0604
  • Qnap » Qts » Version: 4.3.4.0899
    cpe:2.3:o:qnap:qts:4.3.4.0899
  • Qnap » Qts » Version: 4.3.4.1029
    cpe:2.3:o:qnap:qts:4.3.4.1029
  • Qnap » Qts » Version: 4.3.4.1082
    cpe:2.3:o:qnap:qts:4.3.4.1082
  • Qnap » Qts » Version: 4.3.6
    cpe:2.3:o:qnap:qts:4.3.6
  • Qnap » Qts » Version: 4.3.6.0895
    cpe:2.3:o:qnap:qts:4.3.6.0895
  • Qnap » Qts » Version: 4.3.6.0907
    cpe:2.3:o:qnap:qts:4.3.6.0907
  • Qnap » Qts » Version: 4.3.6.0923
    cpe:2.3:o:qnap:qts:4.3.6.0923
  • Qnap » Qts » Version: 4.3.6.0944
    cpe:2.3:o:qnap:qts:4.3.6.0944
  • Qnap » Qts » Version: 4.3.6.0959
    cpe:2.3:o:qnap:qts:4.3.6.0959
  • Qnap » Qts » Version: 4.3.6.0979
    cpe:2.3:o:qnap:qts:4.3.6.0979
  • Qnap » Qts » Version: 4.3.6.0993
    cpe:2.3:o:qnap:qts:4.3.6.0993
  • Qnap » Qts » Version: 4.3.6.1013
    cpe:2.3:o:qnap:qts:4.3.6.1013
  • Qnap » Qts » Version: 4.3.6.1033
    cpe:2.3:o:qnap:qts:4.3.6.1033
  • Qnap » Qts » Version: 4.3.6.1070
    cpe:2.3:o:qnap:qts:4.3.6.1070
  • Qnap » Qts » Version: 4.3.6.1154
    cpe:2.3:o:qnap:qts:4.3.6.1154
  • Qnap » Qts » Version: 4.4.0
    cpe:2.3:o:qnap:qts:4.4.0
  • Qnap » Qts » Version: 4.4.0.0883
    cpe:2.3:o:qnap:qts:4.4.0.0883
  • Qnap » Qts » Version: 4.4.0.0931
    cpe:2.3:o:qnap:qts:4.4.0.0931
  • Qnap » Qts » Version: 4.4.0.0979
    cpe:2.3:o:qnap:qts:4.4.0.0979
  • Qnap » Qts » Version: 4.4.1
    cpe:2.3:o:qnap:qts:4.4.1
  • Qnap » Qts » Version: 4.4.1.0948
    cpe:2.3:o:qnap:qts:4.4.1.0948
  • Qnap » Qts » Version: 4.4.1.0949
    cpe:2.3:o:qnap:qts:4.4.1.0949
  • Qnap » Qts » Version: 4.4.1.0978
    cpe:2.3:o:qnap:qts:4.4.1.0978
  • Qnap » Qts » Version: 4.4.1.0998
    cpe:2.3:o:qnap:qts:4.4.1.0998
  • Qnap » Qts » Version: 4.4.1.0999
    cpe:2.3:o:qnap:qts:4.4.1.0999
  • Qnap » Qts » Version: 4.4.1.1031
    cpe:2.3:o:qnap:qts:4.4.1.1031
  • Qnap » Qts » Version: 4.4.1.1033
    cpe:2.3:o:qnap:qts:4.4.1.1033
  • Qnap » Qts » Version: 4.4.1.1064
    cpe:2.3:o:qnap:qts:4.4.1.1064
  • Qnap » Qts » Version: 4.4.1.1081
    cpe:2.3:o:qnap:qts:4.4.1.1081
  • Qnap » Qts » Version: 4.4.1.1086
    cpe:2.3:o:qnap:qts:4.4.1.1086
  • Qnap » Qts » Version: 4.4.1.1101
    cpe:2.3:o:qnap:qts:4.4.1.1101
  • Qnap » Qts » Version: 4.4.1.1117
    cpe:2.3:o:qnap:qts:4.4.1.1117
  • Qnap » Qts » Version: 4.4.1.1146
    cpe:2.3:o:qnap:qts:4.4.1.1146
  • Qnap » Qts » Version: 4.4.2
    cpe:2.3:o:qnap:qts:4.4.2


Products
Pricing
Contact Us

Shodan ® - All rights reserved