What’s Vulnerable › Vulnerabilities

CVE-2017-10700

• Severity: critical (CVSS 9.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-09-19 · updated 2026-06-17
• Weakness: CWE-20

Description

In the medialibrary component in QNAP NAS 4.3.3.0229, an un-authenticated, remote attacker can execute arbitrary system commands as the root user of the NAS application.

Affected products

• QNAP QTS: 4.3.3.0229

References

• https://www.lateralsecurity.com/downloads/Lateral_Security-Advisory-QNAP_QTS_CVE-2017-10700.pdf
• https://www.qnap.com/en/support/con_show.php?cid=128
• https://www.lateralsecurity.com/downloads/Lateral_Security-Advisory-QNAP_QTS_CVE-2017-10700.pdf
• https://www.qnap.com/en/support/con_show.php?cid=128

Get alerted when CVE-2017-10700 or the next vulnerability affects your stack