VULNERABILITY INTELLIGENCE

CVE-2021-38684

CVSS score8.1 HIGH
EPSS probability1.32%
CISA KEVNot currently listed
Published2021-11-13
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

A stack buffer overflow vulnerability has been reported to affect QNAP NAS running Multimedia Console. If exploited, this vulnerability allows attackers to execute arbitrary code. We have already fixed this vulnerability in the following versions of Multimedia Console: Multimedia Console 1.4.3 ( 2021/10/05 ) and later Multimedia Console 1.5.3 ( 2021/10/05 ) and later

Weakness classification

  • security@qnapsecurity.com.tw: CWE-787
  • nvd@nist.gov: CWE-787

Primary references