description: If exploited, this command injection vulnerability could allow remote attackers to execute arbitrary commands. This issue affects: QNAP Systems Inc. Music Station versions prior to 5.1.13; versions prior to 5.2.9; versions prior to 5.3.11.
problem types: CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')
affected:
{
product: Music Station
vendor: QNAP Systems Inc.
versions:
lessThan: 5.1.13, status: affected, version: unspecified, versionType: custom
lessThan: 5.2.9, status: affected, version: unspecified, versionType: custom
lessThan: 5.3.11, status: affected, version: unspecified, versionType: custom
}
solutions: QNAP have already fixed the issue in the following Music Station:
QTS 4.3.3: Music Station 5.1.13 and later
QTS 4.3.4: Music Station 5.1.13 and later
QTS 4.3.6: Music Station 5.2.9 and later
QTS 4.4.3: Music Station 5.3.11 and later