title: Buffer Overflow Vulnerability in Multimedia Console
description: A stack buffer overflow vulnerability has been reported to affect QNAP NAS running Multimedia Console. If exploited, this vulnerability allows attackers to execute arbitrary code. We have already fixed this vulnerability in the following versions of Multimedia Console: Multimedia Console 1.4.3 ( 2021/10/05 ) and later Multimedia Console 1.5.3 ( 2021/10/05 ) and later
problem types: CWE-787 Out-of-bounds Write
affected:
{
product: Multimedia Console
vendor: QNAP Systems Inc.
versions:
lessThan: 1.4.3 ( 2021/10/05 ), status: affected, version: unspecified, versionType: custom
lessThan: 1.5.3 ( 2021/10/05 ), status: affected, version: unspecified, versionType: custom
}
metrics:
cvssV3_1: [
attackComplexity: HIGH
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 8.1
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
version: 3.1
]
solutions: We have already fixed this vulnerability in the following versions of Multimedia Console:
Multimedia Console 1.4.3 ( 2021/10/05 ) and later
Multimedia Console 1.5.3 ( 2021/10/05 ) and later