CVE-2021-38687

Published Dec 29, 2021

Last updated 3 years ago

CVSS critical 9.8

Overview

Description: A stack buffer overflow vulnerability has been reported to affect QNAP NAS running Surveillance Station. If exploited, this vulnerability allows attackers to execute arbitrary code. We have already fixed this vulnerability in the following versions of Surveillance Station: QTS 5.0.0 (64 bit): Surveillance Station 5.2.0.4.2 ( 2021/10/26 ) and later QTS 5.0.0 (32 bit): Surveillance Station 5.2.0.3.2 ( 2021/10/26 ) and later QTS 4.3.6 (64 bit): Surveillance Station 5.1.5.4.6 ( 2021/10/26 ) and later QTS 4.3.6 (32 bit): Surveillance Station 5.1.5.3.6 ( 2021/10/26 ) and later QTS 4.3.3: Surveillance Station 5.1.5.3.6 ( 2021/10/26 ) and later
Source: security@qnapsecurity.com.tw
NVD status: Analyzed

Risk scores

CVSS 3.1

Type: Primary
Base score: 9.8
Impact score: 5.9
Exploitability score: 3.9
Vector string: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Severity: CRITICAL

CVSS 2.0

Type: Primary
Base score: 7.5
Impact score: 6.4
Exploitability score: 10
Vector string: AV:N/AC:L/Au:N/C:P/I:P/A:P

Weaknesses

security@qnapsecurity.com.tw: CWE-120

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:qnap:surveillance_station:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "15A2CF32-14E5-45BF-A43B-2FE3768390FE",
            "versionEndExcluding": "5.2.0.4.2"
          }
        ],
        "operator": "OR"
      },
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:qnap:qts:5.0.0:*:*:*:*:*:x64:*",
            "vulnerable": false,
            "matchCriteriaId": "E62D198C-6022-48F5-AD92-BB87D2D25342"
          }
        ],
        "operator": "OR"
      }
    ],
    "operator": "AND"
  },
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:qnap:surveillance_station:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "B4FF03B3-0317-482D-B3AF-36B0BB8F5A53",
            "versionEndExcluding": "5.2.0.3.2"
          }
        ],
        "operator": "OR"
      },
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:qnap:qts:5.0.0:*:*:*:*:*:x86:*",
            "vulnerable": false,
            "matchCriteriaId": "7536196C-B372-4437-82DF-369B14E3C52C"
          }
        ],
        "operator": "OR"
      }
    ],
    "operator": "AND"
  },
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:qnap:surveillance_station:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "1FCA8E47-638B-4318-8BBB-ED1EC7D7490C",
            "versionEndExcluding": "5.1.5.4.6"
          }
        ],
        "operator": "OR"
      },
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:qnap:qts:4.3.6:*:*:*:*:*:x64:*",
            "vulnerable": false,
            "matchCriteriaId": "DC0A8856-836E-4096-A7F4-2AFC4D4763BD"
          }
        ],
        "operator": "OR"
      }
    ],
    "operator": "AND"
  },
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:qnap:surveillance_station:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "66A2AC61-B545-4EA7-A7E4-2A2263E47C4A",
            "versionEndExcluding": "5.1.5.3.6"
          }
        ],
        "operator": "OR"
      },
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:qnap:qts:4.3.6:*:*:*:*:*:x86:*",
            "vulnerable": false,
            "matchCriteriaId": "64340B53-0403-4EA7-9397-2D1C5882DF18"
          }
        ],
        "operator": "OR"
      }
    ],
    "operator": "AND"
  },
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:qnap:surveillance_station:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "66A2AC61-B545-4EA7-A7E4-2A2263E47C4A",
            "versionEndExcluding": "5.1.5.3.6"
          }
        ],
        "operator": "OR"
      },
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:qnap:qts:4.3.3:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "C5994C07-17FE-4784-9FA4-9675BA8B4743"
          }
        ],
        "operator": "OR"
      }
    ],
    "operator": "AND"
  }
]

Overview

Risk scores

CVSS 3.1

CVSS 2.0

Weaknesses

Social media

Configurations

References