CVE-2017-13070

A DLL Hijacking vulnerability in QNAP Qsync for Windows (exe) version 4.2.2.0724 and earlier could allow remote attackers to execute…

qnap·CWE-426·Published 2017-12-11

CVSS

—

EPSS

0.02

KEV

Exploits

cve.orgen

168 chars

A DLL Hijacking vulnerability in QNAP Qsync for Windows (exe) version 4.2.2.0724 and earlier could allow remote attackers to execute arbitrary code on Windows machines.

NVDen

168 chars

A DLL Hijacking vulnerability in QNAP Qsync for Windows (exe) version 4.2.2.0724 and earlier could allow remote attackers to execute arbitrary code on Windows machines.

NVDes

198 chars

Una vulnerabilidad de secuestro de DLL en QNAP Qsync para Windows (exe) en su versión 4.2.2.0724 y anteriores podría permitir que atacantes remotos ejecuten código arbitrario en máquinas de Windows.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	9.3	8.6	10.0	AV:N/AC:M/Au:N/C:C/I:C/A:C
3.0	Primary	NVD	7.8	1.8	5.9	CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H