VYPR
← All advisories
High severity7.2NVD Advisory· Published Sep 27, 2021· Updated Jun 17, 2026

CVE-2021-34349

CVE-2021-34349

Description

A command injection vulnerability has been reported to affect QNAP device running QVR. If exploited, this vulnerability could allow remote attackers to run arbitrary commands. We have already fixed this vulnerability in the following versions of QVR: QVR 5.1.5 build 20210803 and later

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Qnap/QVR2 versions
    cpe:2.3:a:qnap:qvr:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:qnap:qvr:*:*:*:*:*:*:*:*range: <5.1.5
    • (no CPE)range: before 5.1.5 build 20210803
  • QNAP Systems Inc./QVRv5
    Range: unspecified

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.