QuRouter vulnerabilities
8 known vulnerabilities in QuRouter from QNAP. 8 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.5 High severity
QuRouter: Time-of-check Time-of-use (TOCTOU) Race Condition
A time-of-check time-of-use (toctou) race condition vulnerability has been reported to affect QuRouter. If exploited, the vulnerability could allow remote attackers to compromise the security of the system. We have already fixed the vulnerability in the follow
- 7.2 High severity
QuRouter: Improper Neutralization of Special Elements used in an OS Command
A command injection vulnerability has been reported to affect QuRouter 2.5.1. If a remote attacker gains an administrator account, they can then exploit the vulnerability to execute arbitrary commands. We have already fixed the vulnerability in the following v
- 7.8 High severity
QuRouter: Improper Authentication
An improper authentication vulnerability has been reported to affect QHora. If an attacker gains local network access, they can then exploit the vulnerability to compromise the security of the system. We have already fixed the vulnerability in the following ve
- 7.2 High severity
QuRouter: Improper Neutralization of Special Elements used in a Command
A command injection vulnerability has been reported to affect QHora. If exploited, the vulnerability could allow remote attackers who have gained administrator access to execute arbitrary commands. We have already fixed the vulnerability in the following versi
- 9.8 Critical severity
QuRouter: Improper Neutralization of Special Elements used in an OS Command
A command injection vulnerability has been reported to affect QHora. If exploited, the vulnerability could allow remote attackers to execute arbitrary commands. We have already fixed the vulnerability in the following version: QuRouter 2.4.5.032 and later
- 9.8 Critical severity
QuRouter: Improper Neutralization of Special Elements used in an SQL Command
A SQL injection vulnerability has been reported to affect QuRouter. If exploited, the vulnerability could allow remote attackers to inject malicious code. We have already fixed the vulnerability in the following version: QuRouter 2.4.5.032 and later
- 7.8 High severity
QuRouter: Improper Neutralization of Special Elements used in an OS Command
An OS command injection vulnerability has been reported to affect several product versions. If exploited, the vulnerability could allow local network attackers to execute commands. We have already fixed the vulnerability in the following versions: QuRouter 2.4
- 9.8 Critical severity
QuRouter: Improper Neutralization of Special Elements used in an OS Command
An OS command injection vulnerability has been reported to affect several product versions. If exploited, the vulnerability could allow remote attackers to execute commands. We have already fixed the vulnerability in the following version: QuRouter 2.4.3.103 a