VYPR
← All advisories
Unrated severityNVD Advisory· Published Oct 22, 2021· Updated Sep 16, 2024

Command Injection Vulnerability in Media Streaming Add-on

CVE-2021-34362

Description

A command injection vulnerability has been reported to affect QNAP device running Media Streaming add-on. If exploited, this vulnerability allow remote attackers to run arbitrary commands. We have already fixed this vulnerability in the following versions of Media Streaming add-on: QTS 5.0.0: Media Streaming add-on 500.0.0.3 ( 2021/08/20 ) and later QTS 4.5.4: Media Streaming add-on 500.0.0.3 ( 2021/08/20 ) and later QTS 4.3.6: Media Streaming add-on 430.1.8.12 ( 2021/08/20 ) and later QTS 4.3.3: Media Streaming add-on 430.1.8.12 ( 2021/09/29 ) and later QuTS-Hero 5.0.0: Media Streaming add-on 500.0.0.3 ( 2021/08/20 ) and later

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Qnap/Media Streaming Add Onllm-fuzzy
    Range: QTS 5.0.0 < 500.0.0.3, QTS 4.5.4 < 500.0.0.3, QTS 4.3.6 < 430.1.8.12, QTS 4.3.3 < 430.1.8.12, QuTS-Hero 5.0.0 < 500.0.0.3
  • QNAP Systems Inc./Media Streaming add-onv5
    Range: unspecified

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.