VYPR
← All advisories
Unrated severityNVD Advisory· Published Nov 26, 2021· Updated Sep 17, 2024

Command Injection Vulnerability in VioStor

CVE-2021-38685

Description

A command injection vulnerability has been reported to affect QNAP device, VioStor. If exploited, this vulnerability allows remote attackers to run arbitrary commands. We have already fixed this vulnerability in the following versions of QVR: QVR FW 5.1.6 build 20211109 and later

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Qnap/QVRllm-create
    Range: <5.1.6
  • Qnap/VioStorllm-fuzzy
    Range: <5.1.6
  • QNAP Systems Inc./QVRv5
    Range: unspecified

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.