CVE-2020-2509
QNAP QNAP Network-Attached Storage (NAS)
QNAP Network-Attached Storage (NAS) Command Injection Vulnerability
What it is
QNAP NAS devices contain a command injection vulnerability which could allow attackers to perform remote code execution.
What to do
Apply updates per vendor instructions.
Vendor notices and references
Description and required action as published by CISA. Full record at NVD.
Other QNAP entries on the list
- VioStor NVR QNAP VioStor NVR OS Command Injection Vulnerability CVE-2023-47565 · Dec 21, 2023
- Photo Station QNAP Photo Station Externally Controlled Reference Vulnerability CVE-2022-27593 · Sep 8, 2022
- Photo Station QNAP Photo Station Path Traversal Vulnerability CVE-2019-7195 · Jun 8, 2022
- Photo Station QNAP Photo Station Path Traversal Vulnerability CVE-2019-7194 · Jun 8, 2022
- QTS QNAP QTS Improper Input Validation Vulnerability CVE-2019-7193 · Jun 8, 2022
- Photo Station QNAP Photo Station Improper Access Control Vulnerability CVE-2019-7192 · Jun 8, 2022