CVE-2017-6359

QNAP QTS before 4.2.4 Build 20170313 allows attackers to gain administrator privileges and execute arbitrary commands via unspecified vectors.

• CWE-78

• http://www.securityfocus.com/bid/97059Third Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/97072Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1038091Third Party Advisory, VDB Entry
• https://www.exploit-db.com/exploits/41842/
• https://www.qnap.com/en-us/releasenotes/Release Notes, Vendor Advisory
• https://www.qnap.com/en/support/con_show.php?cid=113Mitigation, Vendor Advisory
• http://www.securityfocus.com/bid/97059Third Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/97072Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1038091Third Party Advisory, VDB Entry
• https://www.exploit-db.com/exploits/41842/
• https://www.qnap.com/en-us/releasenotes/Release Notes, Vendor Advisory
• https://www.qnap.com/en/support/con_show.php?cid=113Mitigation, Vendor Advisory

Published

Mar 23, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-6349An integer overflow at a u_read_undo memory allocation site …
• CVE-2017-6350An integer overflow at an unserialize_uep memory allocation …
• CVE-2017-6351The WePresent WiPG-1500 device with firmware 1.0.3.7 has a m…
• CVE-2017-6353net/sctp/socket.c in the Linux kernel through 4.10.1 does no…
• CVE-2017-6355Integer overflow in the vrend_create_shader function in vren…
• CVE-2017-6356Palo Alto Networks Terminal Services (aka TS) Agent 6.0, 7.0…5.3
• CVE-2017-6360QNAP QTS before 4.2.4 Build 20170313 allows attackers to gai…
• CVE-2017-6361QNAP QTS before 4.2.4 Build 20170313 allows attackers to exe…
• CVE-2017-6362Double free vulnerability in the gdImagePngPtr function in l…
• CVE-2017-6363In the GD Graphics Library (aka LibGD) through 2.2.5, there …8.1
• CVE-2017-6366Cross-site request forgery (CSRF) vulnerability in NETGEAR D…
• CVE-2017-6367In Cerberus FTP Server 8.0.10.1, a crafted HTTP request caus…