CVE-2017-5227

—

CVSS 3.0

7.5 high

EPSS

6%p93

Published

Mar 23, 2017 (Mar 23, 2017)

Modified

Jun 17, 2026

Description

QNAP QTS before 4.2.4 Build 20170313 allows local users to obtain sensitive Domain Administrator password information by reading data in an XOR format within the /etc/config/uLinux.conf configuration file.

Vendors: qnap
Products: qts
Weakness: CWE-200
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (6.4%)

In the news0 stories

No ingested article mentions this CVE yet.