CVE-2018-0707: qnap q\'center OS Command Injection

CVSS: 9.0v2.0HighModified

Published 16-07-2018Last modified 16-09-2024

Vulnerability summary

CVE-2018-0707 is a high (CVSS 9.0) OS Command Injection vulnerability in qnap q\'center. EPSS estimates a 58.80% chance of exploitation in the next 30 days, higher than 99.1% of scored vulnerabilities. 7 public exploits are recorded.

Overall risk

70/100

0100

High · default modelHow is this calculated?

CVSS score

9.0/10

010

High · v2.0 (NVD)

EPSS score

58.80%

0%100%

Critical · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits7reference, exploit-database, metasploit

Timeline

16-07-2018
PublishedVulnerability first disclosed.
16-09-2024
Last modifiedVulnerability information updated.

Description

Command injection vulnerability in change password of QNAP Q'center Virtual Appliance version 1.7.1063 and earlier could allow authenticated users to run arbitrary commands.

CVSS metrics

2 scores · 1 source · 2 versions

v3.07.2v2.09.0

EPSS trend

Probability

58.80%

Chance of exploitation in the next 30 days

Percentile

99%

Versus all other CVEs

30-day change

0.00 pp

From 58.80% on 20-09-2026

20-09-202620-10-2026

EPSS score

58.80%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

7 found

referenceUnverified
Exploit Reference (coresecurity.com)
Maturity: unknown
referenceUnverified
Exploit Reference (seclists.org)
Maturity: unknown
referenceUnverified
Exploit Reference (packetstormsecurity.com)
Maturity: unknown

Show all 7 exploits

referenceUnverified
Exploit Reference (securityfocus.com)
Maturity: unknown
exploit-databasehardwareVerified
QNAP Qcenter Virtual Appliance - Multiple Vulnerabilities
Maturity: poc
exploit-databaseremotelinuxVerified
QNAP Q'Center - 'change_passwd' Command Execution (Metasploit)
Maturity: weaponized
MetasploitremoteVerified
QNAP Q'Center change_passwd Command Execution
exploit/linux/http/qnap_qcenter_change_passwd_exec
Maturity: weaponized

Weaknesses

CWE · root cause

CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

Affected systems

Qnap2 products

q\'center≤ 1.7.1063
q\'center_virtual_appliance1.7.1063 and earlier

1 vendor · 2 products

References

7 links

www.exploit-db.com/exploits/45015/ExploitX Refsource EXPLOIT DBThird Party AdvisoryVDB Entry
www.coresecurity.com/advisories/qnap-qcenter-virtual-appliance-multiple-vulnerabilitiesX Refsource MISCExploitThird Party Advisory
seclists.org/fulldisclosure/2018/Jul/45Mailing ListX Refsource FULLDISCExploitThird Party Advisory
packetstormsecurity.com/files/…X Refsource MISCExploitThird Party AdvisoryVDB Entry
www.exploit-db.com/exploits/45043/ExploitX Refsource EXPLOIT DBThird Party AdvisoryVDB Entry
www.qnap.com/zh-tw/security-advisory/nas-201807-10X Refsource CONFIRMVendor Advisory
www.securityfocus.com/archive/1/542141/100/0/threadedMailing ListX Refsource BUGTRAQExploitThird Party AdvisoryVDB Entry

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities