QNAP Multimedia Console 1.0.4

CPE Details

QNAP Multimedia Console 1.0.4
qnap
multimedia_console
1.0.4
2020-12-11
16h18 +00:00
2020-12-11
16h18 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:qnap:multimedia_console:1.0.4:*:*:*:*:*:*:*

Informations

Vendor

qnap

Product

multimedia_console

Version

1.0.4

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2023-23364 2023-09-22 03h51 +00:00 A buffer copy without checking size of input vulnerability has been reported to affect QNAP operating systems. If exploited, the vulnerability possibly allows remote users to execute code via unspecified vectors. We have already fixed the vulnerability in the following versions: Multimedia Console 2.1.1 ( 2023/03/29 ) and later Multimedia Console 1.4.7 ( 2023/03/20 ) and later
9.8
Critical
CVE-2021-38684 2021-11-13 00h50 +00:00 A stack buffer overflow vulnerability has been reported to affect QNAP NAS running Multimedia Console. If exploited, this vulnerability allows attackers to execute arbitrary code. We have already fixed this vulnerability in the following versions of Multimedia Console: Multimedia Console 1.4.3 ( 2021/10/05 ) and later Multimedia Console 1.5.3 ( 2021/10/05 ) and later
9.8
Critical
CVE-2020-36195 2021-04-17 03h50 +00:00 An SQL injection vulnerability has been reported to affect QNAP NAS running Multimedia Console or the Media Streaming add-on. If exploited, the vulnerability allows remote attackers to obtain application information. QNAP has already fixed this vulnerability in the following versions of Multimedia Console and the Media Streaming add-on. QTS 4.3.3: Media Streaming add-on 430.1.8.10 and later QTS 4.3.6: Media Streaming add-on 430.1.8.8 and later QTS 4.4.x and later: Multimedia Console 1.3.4 and later We have also fixed this vulnerability in the following versions of QTS 4.3.3 and QTS 4.3.6, respectively: QTS 4.3.3.1624 Build 20210416 or later QTS 4.3.6.1620 Build 20210322 or later
9.8
Critical
CVE-2020-2493 2020-12-10 03h35 +00:00 This cross-site scripting vulnerability in Multimedia Console allows remote attackers to inject malicious code. QANP have already fixed this vulnerability in Multimedia Console 1.1.5 and later.
6.1
Medium