What’s Vulnerable › Vulnerabilities
CVE-2017-13067
- Severity: critical (CVSS 9.8 v3.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 16.7% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2017-09-14 · updated 2026-06-17
Description
QNAP has patched a remote code execution vulnerability affecting the QTS Media Library in all versions prior to QTS 4.2.6 build 20170905 and QTS 4.3.3.0299 build 20170901. This particular vulnerability allows a remote attacker to execute commands on a QNAP NAS using a transcoding service on port 9251. A remote user does not require any privileges to successfully execute an attack.
Affected products
- QNAP QTS: from 4.2.0 through 4.2.6; from 4.3.0 through 4.3.3.0299
References
Get alerted when CVE-2017-13067 or the next vulnerability affects your stack