HTTP: QNAP Multiple Vulnerabilities
This signature detects attempts to exploit a known vulnerability in QNAP devices.
Extended Description
cgi-bin/pingping.cgi on QNAP VioStor NVR devices with firmware 4.0.3, and in the Surveillance Station Pro component in QNAP NAS, allows remote authenticated users to execute arbitrary commands by leveraging guest access and placing shell metacharacters in the query string.
Affected Products
Qnap surveillance_station_pro
References
CVE: CVE-2013-0143
Short Name
HTTP:QNAP-MULT-VULN
Severity
Major
Recommended
False
Recommended Action
Drop
Category
HTTP
Keywords
CVE-2013-0143 Multiple QNAP Vulnerabilities
Release Date
06/05/2018
Supported Platforms
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3
Sigpack Version
3761
False Positive
Unknown
Vendors
Qnap
CVSS Score
6.5