VYPR
← All advisories
High severity8.7NVD Advisory· Published Oct 22, 2021· Updated Jun 17, 2026

CVE-2021-34362

CVE-2021-34362

Description

A command injection vulnerability has been reported to affect QNAP device running Media Streaming add-on. If exploited, this vulnerability allow remote attackers to run arbitrary commands. We have already fixed this vulnerability in the following versions of Media Streaming add-on: QTS 5.0.0: Media Streaming add-on 500.0.0.3 ( 2021/08/20 ) and later QTS 4.5.4: Media Streaming add-on 500.0.0.3 ( 2021/08/20 ) and later QTS 4.3.6: Media Streaming add-on 430.1.8.12 ( 2021/08/20 ) and later QTS 4.3.3: Media Streaming add-on 430.1.8.12 ( 2021/09/29 ) and later QuTS-Hero 5.0.0: Media Streaming add-on 500.0.0.3 ( 2021/08/20 ) and later

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Qnap/Media Streaming Add On2 versions
    cpe:2.3:a:qnap:media_streaming_add-on:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:qnap:media_streaming_add-on:*:*:*:*:*:*:*:*range: <500.0.0.3
    • (no CPE)range: See description for specific QTS versions and add-on versions
  • QNAP Systems Inc./Media Streaming add-onv5
    Range: unspecified

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.