What’s Vulnerable › Vulnerabilities

CVE-2017-12582

• Severity: critical (CVSS 9.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-08-18 · updated 2026-06-17
• Weakness: CWE-862

Description

Unprivileged user can access all functions in the Surveillance Station component in QNAP TS212P devices with firmware 4.2.1 build 20160601. Unprivileged user cannot login at front end but with that unprivileged user SID, all function can access at Surveillance Station.

Affected products

• QNAP Ts-212P Firmware: 4.2.1

References

• http://www.kth.ninja/2017/08/qnap-surveillance-station.html
• http://www.kth.ninja/2017/08/qnap-surveillance-station.html

Get alerted when CVE-2017-12582 or the next vulnerability affects your stack