A stack buffer overflow vulnerability has been reported to affect QNAP device running NVR Storage Expansion. If exploited, this vulnerability allows attackers to execute arbitrary code. We have already fixed this vulnerability in the following versions of NVR Storage Expansion: NVR Storage Expansion 1.0.6 ( 2021/08/03 ) and later
References
| Link | Resource |
|---|---|
| https://www.qnap.com/en/security-advisory/qsa-21-36 | Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
23 Sep 2021, 15:50
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-787 | |
| CVSS |
v2 : v3 : |
v2 : 7.5
v3 : 9.8 |
| CPE | cpe:2.3:h:qnap:nvr_storage_expansion:-:*:*:*:*:*:*:* cpe:2.3:o:qnap:nvr_storage_expansion_firmware:*:*:*:*:*:*:*:* |
|
| References | (CONFIRM) https://www.qnap.com/en/security-advisory/qsa-21-36 - Vendor Advisory |
10 Sep 2021, 05:15
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | A stack buffer overflow vulnerability has been reported to affect QNAP device running NVR Storage Expansion. If exploited, this vulnerability allows attackers to execute arbitrary code. We have already fixed this vulnerability in the following versions of NVR Storage Expansion: NVR Storage Expansion 1.0.6 ( 2021/08/03 ) and later |
10 Sep 2021, 04:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2021-09-10 04:15
Updated : 2023-12-10 14:09
NVD link : CVE-2021-34346
Mitre link : CVE-2021-34346
CVE.ORG link : CVE-2021-34346
JSON object : View
Products Affected
qnap
- nvr_storage_expansion
- nvr_storage_expansion_firmware
CWE
CWE-787
Out-of-bounds Write