CVE-2020-25847

Publication date

2020-12-29 07:10:13

Family

twcert

State

PUBLISHED

Description

This command injection vulnerability allows attackers to execute arbitrary commands in a compromised application. QNAP have already fixed this vulnerability in the following versions of QTS and QuTS hero.