CVE-2015-6003
Directory traversal vulnerability in QNAP QTS before 4.1.4 build 0910 and 4.2.x before 4.2.0 RC2 build 0910, when AFP is enabled, allows remote attackers to read or write to arbitrary files by leveraging access to an OS X (1) user or (2) guest account.
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (4.08%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
Directory traversal vulnerability in QNAP QTS before 4.1.4 build 0910 and 4.2.x before 4.2.0 RC2 build 0910, when AFP is enabled, allows remote attackers to read or write to arbitrary files by leveraging access to an OS X (1) user or (2) guest account.
- CVSS 2.0
- 9.3 HIGHAV:N/AC:M/Au:N/C:C/I:C/A:C
- EPSS
- 4.08% probability · 90th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-22
- Affected
- qnap/qts
- Source
- cret@cert.org
References
- http://www.kb.cert.org/vuls/id/751328Third Party Advisory, US Government Resource
- http://www.securitytracker.com/id/1033794
- https://www.qnap.com/i/en/support/con_show.php?cid=85Vendor Advisory
- http://www.kb.cert.org/vuls/id/751328Third Party Advisory, US Government Resource
- http://www.securitytracker.com/id/1033794
- https://www.qnap.com/i/en/support/con_show.php?cid=85Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.