Approved changes feed: RSS · Atom

cpe:2.3:o:qnap:quts_hero:h5.0.0:*:*:*:*:*:*:*

part: o version: h5.0.0 update: *

VendorQnap (a402dda4-b7da-50eb-b0f8-700e564ee87d)
ProductQuts Hero (c808c21e-6b74-58ae-ac08-bf1b891081da)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-34362 not_vulnerable 2026-06-08 05:32:13.086805 Command Injection Vulnerability in Media Streaming Add-on
HIGH (8.7)
A command injection vulnerability has been reported to affect QNAP device running Media Streaming add-on. If exploited, this vulnerability allow remote attackers to run arbitrary commands. We have already fixed this vulnerability in the following versions of Media Streaming add-on: QTS 5.0.0: Media Streaming add-on 500.0.0.3 ( 2021/08/20 ) and later QTS 4.5.4: Media Streaming add-on 500.0.0.3 ( 2021/08/20 ) and later QTS 4.3.6: Media Streaming add-on 430.1.8.12 ( 2021/08/20 ) and later QTS 4.3.3: Media Streaming add-on 430.1.8.12 ( 2021/09/29 ) and later QuTS-Hero 5.0.0: Media Streaming add-on 500.0.0.3 ( 2021/08/20 ) and later
Published: 2021-10-22T04:25:09.871Z
Updated: 2024-09-16T16:17:27.193Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34360 not_vulnerable 2026-06-08 05:32:13.079937 CSRF Bypass in Proxy Server
MEDIUM (5.3)
A cross-site request forgery (CSRF) vulnerability has been reported to affect QNAP device running Proxy Server. If exploited, this vulnerability allows remote attackers to inject malicious code. We have already fixed this vulnerability in the following versions of Proxy Server: QTS 4.5.x: Proxy Server 1.4.2 ( 2021/12/30 ) and later QuTS hero h5.0.0: Proxy Server 1.4.3 ( 2022/01/18 ) and later QuTScloud c4.5.6: Proxy Server 1.4.2 ( 2021/12/30 ) and later
Published: 2022-05-26T07:20:10.040Z
Updated: 2024-09-16T19:56:08.910Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.