Approved changes feed: RSS · Atom

cpe:2.3:o:qnap:qts:4.3.6.1446:*:*:*:*:*:*:*

part: o version: 4.3.6.1446 update: *

VendorQnap (a402dda4-b7da-50eb-b0f8-700e564ee87d)
ProductQts (9004baf2-b431-53ba-b074-38fcdcfcd981)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-36195 vulnerable 2026-06-08 05:25:02.735518 SQL Injection Vulnerability in Multimedia Console and the Media Streaming Add-On
CRITICAL (9.8)
An SQL injection vulnerability has been reported to affect QNAP NAS running Multimedia Console or the Media Streaming add-on. If exploited, the vulnerability allows remote attackers to obtain application information. QNAP has already fixed this vulnerability in the following versions of Multimedia Console and the Media Streaming add-on. QTS 4.3.3: Media Streaming add-on 430.1.8.10 and later QTS 4.3.6: Media Streaming add-on 430.1.8.8 and later QTS 4.4.x and later: Multimedia Console 1.3.4 and later We have also fixed this vulnerability in the following versions of QTS 4.3.3 and QTS 4.3.6, respectively: QTS 4.3.3.1624 Build 20210416 or later QTS 4.3.6.1620 Build 20210322 or later
Published: 2021-04-17T03:50:13.274Z
Updated: 2024-09-16T17:28:07.500Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-2509 vulnerable 2026-06-08 05:24:59.395869 Command Injection Vulnerability in QTS and QuTS hero
A command injection vulnerability has been reported to affect QTS and QuTS hero. If exploited, this vulnerability allows attackers to execute arbitrary commands in a compromised application. We have already fixed this vulnerability in the following versions: QTS 4.5.2.1566 Build 20210202 and later QTS 4.5.1.1495 Build 20201123 and later QTS 4.3.6.1620 Build 20210322 and later QTS 4.3.4.1632 Build 20210324 and later QTS 4.3.3.1624 Build 20210416 and later QTS 4.2.6 Build 20210327 and later QuTS hero h4.5.1.1491 build 20201119 and later
Published: 2021-04-17T03:50:12.655Z
Updated: 2025-10-21T23:25:49.063Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.