Approved changes feed: RSS · Atom

cpe:2.3:o:qnap:qts:4.3.3:-:*:*:*:*:*:*

part: o version: 4.3.3 update: -

VendorQnap (a402dda4-b7da-50eb-b0f8-700e564ee87d)
ProductQts (9004baf2-b431-53ba-b074-38fcdcfcd981)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-34362 not_vulnerable 2026-06-08 05:32:13.085662 Command Injection Vulnerability in Media Streaming Add-on
HIGH (8.7)
A command injection vulnerability has been reported to affect QNAP device running Media Streaming add-on. If exploited, this vulnerability allow remote attackers to run arbitrary commands. We have already fixed this vulnerability in the following versions of Media Streaming add-on: QTS 5.0.0: Media Streaming add-on 500.0.0.3 ( 2021/08/20 ) and later QTS 4.5.4: Media Streaming add-on 500.0.0.3 ( 2021/08/20 ) and later QTS 4.3.6: Media Streaming add-on 430.1.8.12 ( 2021/08/20 ) and later QTS 4.3.3: Media Streaming add-on 430.1.8.12 ( 2021/09/29 ) and later QuTS-Hero 5.0.0: Media Streaming add-on 500.0.0.3 ( 2021/08/20 ) and later
Published: 2021-10-22T04:25:09.871Z
Updated: 2024-09-16T16:17:27.193Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28809 not_vulnerable 2026-06-08 05:31:24.921807 Missing Authentication for Critical Function in RTRR Server in HBS3
CRITICAL (9.8)
An improper access control vulnerability has been reported to affect certain legacy versions of HBS 3. If exploited, this vulnerability allows attackers to compromise the security of the operating system.QNAP have already fixed this vulnerability in the following versions of HBS 3: QTS 4.3.6: HBS 3 v3.0.210507 and later QTS 4.3.4: HBS 3 v3.0.210506 and later QTS 4.3.3: HBS 3 v3.0.210506 and later
Published: 2021-07-08T07:40:12.294Z
Updated: 2024-09-17T00:36:54.377Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-36197 not_vulnerable 2026-06-08 05:25:02.745919 Improper Access Control Vulnerability in Music Station
HIGH (7.1)
An improper access control vulnerability has been reported to affect earlier versions of Music Station. If exploited, this vulnerability allows attackers to compromise the security of the software by gaining privileges, reading sensitive information, executing commands, evading detection, etc. This issue affects: QNAP Systems Inc. Music Station versions prior to 5.3.16 on QTS 4.5.2; versions prior to 5.2.10 on QTS 4.3.6; versions prior to 5.1.14 on QTS 4.3.3; versions prior to 5.3.16 on QuTS hero h4.5.2; versions prior to 5.3.16 on QuTScloud c4.5.4.
Published: 2021-05-13T02:55:12.525Z
Updated: 2024-09-17T01:01:30.720Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.