Critical severity9.8NVD Advisory· Published Jun 21, 2018· Updated Jun 17, 2026

CVE-2018-0712

Description

Command injection vulnerability in LDAP Server in QNAP QTS 4.2.6 build 20171208, QTS 4.3.3 build 20180402, QTS 4.3.4 build 20180413 and their earlier versions could allow remote attackers to run arbitrary commands or install malware on the NAS.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Qnap/Qtsllm-fuzzy
Range: <= 4.3.4 build 20180413 (and earlier versions)
QNAP/LDAP Server in QTSv5
Range: LDAP Server in QTS 4.2.6 build 20171208, QTS 4.3.3 build 20180402, QTS 4.3.4 build 20180413 and their earlier versions

Patches

Vulnerability mechanics

References

www.securitytracker.com/id/1041141nvdThird Party AdvisoryVDB Entry
www.qnap.com/zh-tw/security-advisory/nas-201806-19nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000