CVEvulnerability

CVE-2013-0143

6.5 MEDIUM Published 2013-06-07 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2013-06-07
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
6.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:P
Weaknesses
CWE-94

Description

cgi-bin/pingping.cgi on QNAP VioStor NVR devices with firmware 4.0.3, and in the Surveillance Station Pro component in QNAP NAS, allows remote authenticated users to execute arbitrary commands by leveraging guest access and placing shell metacharacters in the query string.

Affected configurations

• qnap viostor network video recorder 4.0.3 • qnap viostor network video recorder • qnap surveillance station pro • qnap nas

Related

Weakness · CWE (1)

  • CWE-94 Improper Control of Generation of Code weakness

References