What’s Vulnerable › Vulnerabilities

CVE-2017-7630

• Severity: medium (CVSS 5.3 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.0% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2018-03-27 · updated 2026-06-17
• Weakness: CWE-200

Description

QNAP QTS 4.2.6 build 20171026, QTS 4.3.3 build 20170727 and earlier allows remote attackers to obtain potentially sensitive information (firmware version and running services) via a request to sysinfoReq.cgi.

Affected products

• QNAP QTS: 4.2.6, 4.3.3

References

• https://www.qnap.com/zh-tw/security-advisory/nas-201803-23
• https://www.qnap.com/zh-tw/security-advisory/nas-201803-23

Get alerted when CVE-2017-7630 or the next vulnerability affects your stack