CVE-2017-17028

A buffer overflow vulnerability in external device function in QNAP QTS version 4.2.6 build 20171026, 4.3.3.0378 build 20171117, 4.3.4.0387 (Beta 2) build 20171116 and earlier could allow remote attackers to execute arbitrary code on NAS devices.

• CWE-119

• http://www.securitytracker.com/id/1040018Third Party Advisory, VDB Entry
• https://www.qnap.com/zh-tw/security-advisory/nas-201712-15Issue Tracking, Vendor Advisory
• http://www.securitytracker.com/id/1040018Third Party Advisory, VDB Entry
• https://www.qnap.com/zh-tw/security-advisory/nas-201712-15Issue Tracking, Vendor Advisory

Published

Dec 21, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-17009Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2017-1701IBM Team Concert (RTC) 5.0, 5.0.1, 5.0.2, 6.0, 6.0.1, 6.0.2,…
• CVE-2017-17010Untrusted search path vulnerability in Content Manager Assis…
• CVE-2017-17020On D-Link DCS-5009 devices with firmware 1.08.11 and earlier…
• CVE-2017-17023The Sophos UTM VPN endpoint interacts with client software p…
• CVE-2017-17027A buffer overflow vulnerability in FTP service in QNAP QTS v…
• CVE-2017-17029A buffer overflow vulnerability in login function in QNAP QT…
• CVE-2017-17030A buffer overflow vulnerability in login function in QNAP QT…
• CVE-2017-17031A buffer overflow vulnerability in password function in QNAP…
• CVE-2017-17032A buffer overflow vulnerability in password function in QNAP…
• CVE-2017-17033A buffer overflow vulnerability in password function in QNAP…
• CVE-2017-17042lib/yard/core_ext/file.rb in the server in YARD before 0.9.1…