QNAP – Web Server Remote Code Execution via Bash Environment Variable Code Injection (Metasploit)

CVE编号

CVE-2014-3659

利用情况

暂无

补丁情况

N/A

披露时间

2014-09-25

漏洞描述

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2014-7169. Reason: This candidate is a reservation duplicate of CVE-2014-7169 because the CNA for this ID did not follow multiple procedures that are intended to minimize duplicate CVE assignments. Notes: All CVE users should reference CVE-2014-7169 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.

解决建议

建议您更新当前系统或软件至最新版，完成漏洞的修复。

参考链接

CVSS3评分

N/A

• 攻击路径

  N/A

• 攻击复杂度
  N/A

• 权限要求
  N/A
• 影响范围
  N/A
• 用户交互
  N/A

• 可用性
  N/A
• 保密性
  N/A

• 完整性
  N/A

N/A

CWE-ID 漏洞类型