cveboard RSS feed

CVE-2019-7198

CVE.org · Published

Historical CVEsJSONAI instructions

Record status
Published
Identifier year (not publication year)
2019
Source publication
Source updated
Imported by cveboard
Source snapshot
cve_2026-10-24_midnight_baseline ·

Plain text

CNA source text (English)

Command Injection Vulnerability in QTS and QuTS hero

This command injection vulnerability allows attackers to execute arbitrary commands in a compromised application. QNAP have already fixed this vulnerability in the following versions of QTS and QuTS hero. QuTS hero h4.5.1.1472 build 20201031 and later QTS 4.5.1.1456 build 20201015 and later QTS 4.4.3.1354 build 20200702 and later

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

QTS

Vendor
QNAP Systems Inc.
Product
QTS
Platforms
Unknown
Default status
Unknown
QTS · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
< 4.5.1.1456affectedUnavailableUnavailableUnavailableNone listed
< 4.4.3.1354affectedUnavailableUnavailableUnavailableNone listed

QuTS hero

Vendor
QNAP Systems Inc.
Product
QuTS hero
Platforms
Unknown
Default status
Unknown
QuTS hero · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
< h4.5.1.1472affectedUnavailableUnavailableUnavailableNone listed