Command Injection Vulnerability in QVR
Vulnerability Description
A command injection vulnerability has been reported to affect QNAP device running QVR. If exploited, this vulnerability could allow remote attackers to run arbitrary commands. We have already fixed this vulnerability in the following versions of QVR: QVR 5.1.5 build 20210902 and later
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-34352
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- 360 的安全研究员 侯留洋（houliuyang@360.cn）和叶根深（yegenshen@360.cn）
Affected Vendor
QNAP Systems Inc.
View all reports →