VULNERABILITY INTELLIGENCE

CVE-2017-7638

CVSS score6.5 MEDIUM
EPSS probability0.67%
CISA KEVNot currently listed
Published2018-03-08
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Description

QNAP NAS application Media Streaming add-on version 421.1.0.2, 430.1.2.0, and earlier does not authenticate requests properly. Successful exploitation could lead to change of the Media Streaming settings, and leakage of sensitive information of the QNAP NAS.

Weakness classification

  • CWE-287: Improper Authentication

Primary references