GCVE - cpe:2.3:a:qnap:music_station:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:qnap:music_station:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Qnap (`a402dda4-b7da-50eb-b0f8-700e564ee87d`)
Product	Music Station (`2eda43e6-eb9e-5f64-96a5-1a0ab5e948f7`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2023-45038`	vulnerable	2026-06-08 06:12:41.709880	Music Station MEDIUM (4.3) An improper authentication vulnerability has been reported to affect Music Station. If exploited, the vulnerability could allow users to compromise the security of the system via a network. We have already fixed the vulnerability in the following version: Music Station 5.4.0 and later Published: 2024-09-06T16:26:59.319Z Updated: 2024-09-06T17:44:36.623Z Open on db.gcve.eu Reference links https://www.qnap.com/en/security-advisory/qsa-24-25	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-39299`	vulnerable	2026-06-08 06:09:36.919920	Music Station HIGH (7.5) A path traversal vulnerability has been reported to affect Music Station. If exploited, the vulnerability could allow users to read the contents of unexpected files and expose sensitive data via a network. We have already fixed the vulnerability in the following versions: Music Station 4.8.11 and later Music Station 5.1.16 and later Music Station 5.3.23 and later Published: 2023-11-03T16:34:46.932Z Updated: 2024-09-05T18:40:12.259Z Open on db.gcve.eu Reference links https://www.qnap.com/en/security-advisory/qsa-23-61	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-23366`	vulnerable	2026-06-08 05:54:28.164346	Music Station HIGH (7.7) A path traversal vulnerability has been reported to affect Music Station. If exploited, the vulnerability could allow authenticated users to read the contents of unexpected files and expose sensitive data via a network. We have already fixed the vulnerability in the following version: Music Station 5.3.22 and later Published: 2023-10-06T16:34:01.529Z Updated: 2024-09-19T15:20:25.517Z Open on db.gcve.eu Reference links https://www.qnap.com/en/security-advisory/qsa-23-28	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-23365`	vulnerable	2026-06-08 05:54:28.163695	Music Station HIGH (7.7) A path traversal vulnerability has been reported to affect Music Station. If exploited, the vulnerability could allow authenticated users to read the contents of unexpected files and expose sensitive data via a network. We have already fixed the vulnerability in the following version: Music Station 5.3.22 and later Published: 2023-10-06T16:33:40.264Z Updated: 2024-09-19T15:20:40.296Z Open on db.gcve.eu Reference links https://www.qnap.com/en/security-advisory/qsa-23-28	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-36197`	vulnerable	2026-06-08 05:25:02.744608	Improper Access Control Vulnerability in Music Station HIGH (7.1) An improper access control vulnerability has been reported to affect earlier versions of Music Station. If exploited, this vulnerability allows attackers to compromise the security of the software by gaining privileges, reading sensitive information, executing commands, evading detection, etc. This issue affects: QNAP Systems Inc. Music Station versions prior to 5.3.16 on QTS 4.5.2; versions prior to 5.2.10 on QTS 4.3.6; versions prior to 5.1.14 on QTS 4.3.3; versions prior to 5.3.16 on QuTS hero h4.5.2; versions prior to 5.3.16 on QuTScloud c4.5.4. Published: 2021-05-13T02:55:12.525Z Updated: 2024-09-17T01:01:30.720Z Open on db.gcve.eu Reference links https://www.qnap.com/zh-tw/security-advisory/qsa-21-08 https://www.zerodayinitiative.com/advisories/ZDI-21-591/ http://packetstormsecurity.com/files/162849/QNAP-MusicStation-MalwareRemover-File-Upload-Command-Injection.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-2494`	vulnerable	2026-06-08 05:24:59.304702	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-7185`	vulnerable	2026-06-08 05:14:14.048906	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-19952`	vulnerable	2026-06-08 05:11:16.471671	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-19951`	vulnerable	2026-06-08 05:11:16.470945	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-19950`	vulnerable	2026-06-08 05:11:16.468466	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-0729`	vulnerable	2026-06-08 05:10:24.578505	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-0718`	vulnerable	2026-06-08 05:10:24.570562	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-13069`	vulnerable	2026-06-08 05:08:48.288711	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.