VulnerabilityModified
CVE-2019-7181
Buffer Overflow vulnerability in myQNAPcloud Connect 1.3.3.0925 and earlier could allow remote attackers to crash the program.
HIGH 7.5EPSS 9.80%
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (9.80%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
Buffer Overflow vulnerability in myQNAPcloud Connect 1.3.3.0925 and earlier could allow remote attackers to crash the program.
- CVSS 3.0
- 7.5 HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- EPSS
- 9.80% probability · 95th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-119
- Affected
- qnap/myqnapcloud
- Source
- security@qnapsecurity.com.tw
References
- http://packetstormsecurity.com/files/152570/QNAP-myQNAPcloud-Connect-1.3.4.0317-Username-Password-Denial-Of-Service.html
- https://www.exploit-db.com/exploits/46733/
- https://www.qnap.com/zh-tw/security-advisory/nas-201905-09Vendor Advisory
- http://packetstormsecurity.com/files/152570/QNAP-myQNAPcloud-Connect-1.3.4.0317-Username-Password-Denial-Of-Service.html
- https://www.exploit-db.com/exploits/46733/
- https://www.qnap.com/zh-tw/security-advisory/nas-201905-09Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.