CVE:CVE-2018-19942
CNNVD:CNNVD-201909-934
Qnap Systems QNAP Systems TS-870是中国威联通（Qnap Systems）公司的一款NAS（网络附属存储）设备。
QNAP Systems TS-870 4.3.4.0486版本固件中的文件管理器存在安全漏洞。攻击者可利用该漏洞执行恶意的JavaScript代码。
solution:Upgrade qnap qts to a higher version than 4.2.6,4.3.6,4.5.1,4.2.6,4.2.6:build_20170517,4.2.6:build_20190322,4.2.6:build_20190730,4.2.6:build_20190921,4.2.6:build_20191107,4.2.6:build_20200109,4.2.6:build_20200421,4.2.6:build_20200611,4.2.6:build_20200821,4.3.3,4.3.3.0095,4.3.3.0096,4.3.3.0136,4.3.3.0154,4.3.3.0174,4.3.3.0188,4.3.3.0210,4.3.3.0229,4.3.3.0238,4.3.3.0262,4.3.3.0299,4.3.3.0351,4.3.3.0353,4.3.3.0361,4.3.3.0369,4.3.3.0378,4.3.3.0396,4.3.3.0404,4.3.3.0416,4.3.3.0418,4.3.3.0448,4.3.3.0514,4.3.3.0546,4.3.3.0570,4.3.3.0868,4.3.3.0998,4.3.3.1051,4.3.3.1098,4.3.3.1161,4.3.3.1252,4.3.3.1315,4.3.3.1386,4.3.4,4.3.4.0358,4.3.4.0358:beta1,4.3.4.0370,4.3.4.0370:beta1,4.3.4.0372,4.3.4.0372:beta1,4.3.4.0374,4.3.4.0374:beta1,4.3.4.0387,4.3.4.0387:beta2,4.3.4.0411,4.3.4.0416,4.3.4.0427,4.3.4.0434,4.3.4.0435,4.3.4.0451,4.3.4.0483,4.3.4.0486,4.3.4.0506,4.3.4.0516,4.3.4.0526,4.3.4.0551,4.3.4.0557,4.3.4.0561,4.3.4.0569,4.3.4.0593,4.3.4.0597,4.3.4.0604,4.3.4.0899,4.3.4.1029,4.3.4.1082,4.3.4.1190,4.3.4.1282,4.3.4.1368,4.3.4.1417,4.3.6,4.3.6.0895,4.3.6.0907,4.3.6.0923,4.3.6.0944,4.3.6.0959,4.3.6.0979,4.3.6.0993,4.3.6.1013,4.3.6.1033,4.3.6.1070,4.3.6.1154,4.3.6.1218,4.3.6.1263,4.3.6.1286,4.3.6.1333,4.3.6.1411,4.5.1,4.5.2,and avoid the version (,4.2.6),[4.3.5,4.3.6),[4.4.0,4.5.1),4.2.6,4.2.6:build_20170517,4.2.6:build_20190322,4.2.6:build_20190730,4.2.6:build_20190921,4.2.6:build_20191107,4.2.6:build_20200109,4.2.6:build_20200421,4.2.6:build_20200611,4.2.6:build_20200821,4.3.3,4.3.3.0095,4.3.3.0096,4.3.3.0136,4.3.3.0154,4.3.3.0174,4.3.3.0188,4.3.3.0210,4.3.3.0229,4.3.3.0238,4.3.3.0262,4.3.3.0299,4.3.3.0351,4.3.3.0353,4.3.3.0361,4.3.3.0369,4.3.3.0378,4.3.3.0396,4.3.3.0404,4.3.3.0416,4.3.3.0418,4.3.3.0448,4.3.3.0514,4.3.3.0546,4.3.3.0570,4.3.3.0868,4.3.3.0998,4.3.3.1051,4.3.3.1098,4.3.3.1161,4.3.3.1252,4.3.3.1315,4.3.3.1386,4.3.4,4.3.4.0358,4.3.4.0358:beta1,4.3.4.0370,4.3.4.0370:beta1,4.3.4.0372,4.3.4.0372:beta1,4.3.4.0374,4.3.4.0374:beta1,4.3.4.0387,4.3.4.0387:beta2,4.3.4.0411,4.3.4.0416,4.3.4.0427,4.3.4.0434,4.3.4.0435,4.3.4.0451,4.3.4.0483,4.3.4.0486,4.3.4.0506,4.3.4.0516,4.3.4.0526,4.3.4.0551,4.3.4.0557,4.3.4.0561,4.3.4.0569,4.3.4.0593,4.3.4.0597,4.3.4.0604,4.3.4.0899,4.3.4.1029,4.3.4.1082,4.3.4.1190,4.3.4.1282,4.3.4.1368,4.3.4.1417,4.3.6,4.3.6.0895,4.3.6.0907,4.3.6.0923,4.3.6.0944,4.3.6.0959,4.3.6.0979,4.3.6.0993,4.3.6.1013,4.3.6.1033,4.3.6.1070,4.3.6.1154,4.3.6.1218,4.3.6.1263,4.3.6.1286,4.3.6.1333,4.3.6.1411,4.5.1,4.5.2; Upgrade qnap quts_hero to a higher version than h4.5.1,h4.5.1,and avoid the version (,h4.5.1),h4.5.1; Upgrade qnap qutscloud to a higher version than c4.5.3,c4.5.3,c4.5.4,and avoid the version (,c4.5.3),c4.5.3,c4.5.4