ZDI-26-776: QNAP TS-453E syslog log_message Format String Remote Code Execution Vulnerability
ZDI disclosed an unauthenticated format-string bug in QNAP TS-453E syslog enabling network-adjacent code execution.
The Zero Day Initiative published ZDI-26-776, a format-string vulnerability in the syslog log_message function on QNAP TS-453E devices. Network-adjacent attackers can execute arbitrary code without authentication. ZDI assigned CVSS 7.5 and listed CVE-2018-10388 and CVE-2018-10389. The advisory does not report exploitation in the wild.
- Format-string flaw in QNAP TS-453E syslog log_message.
- Network-adjacent attackers need no authentication for code execution.
- ZDI CVSS 7.5; CVE-2018-10388 and CVE-2018-10389.
- No in-the-wild exploitation is reported.
Vulnerabilities mentionedAll →
- CVE-2018-103889.84%Format string vulnerability in the logMess function in TFTP Server SP 1.66 and earlier allows remote attackers to perform a denial of service or execute…published · open tftp server project open tftp server+1 related
| CVE | Vulnerability | CVSS | EPSS | Flags | Affected | Exposure | Published |
|---|---|---|---|---|---|---|---|
CVE-2018-10388+1 related CVE |
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of QNAP TS-453E devices. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.5. The following CVEs are assigned: CVE-2018-10388, CVE-2018-10389.
This source does not provide full text. Read it at zerodayinitiative.com.