{"id":"CVE-2018-19949","revision":"98f975d385164bc38dab6eadb3872960","records":[{"revision":"98f975d385164bc38dab6eadb3872960","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2018-19949","aliases":[],"title":"If exploited, this command injection vulnerability could allow remote attackers to run arbitrary commands. QNAP has already fixed the issue in the following QTS versions. QTS 4.4.2.1231 on build 20200302; QTS 4.4.1.1201 on build 20200130; Q…","description":"If exploited, this command injection vulnerability could allow remote attackers to run arbitrary commands. QNAP has already fixed the issue in the following QTS versions. QTS 4.4.2.1231 on build 20200302; QTS 4.4.1.1201 on build 20200130; QTS 4.3.6.1218 on build 20200214; QTS 4.3.4.1190 on build 20200107; QTS 4.3.3.1161 on build 20200109; QTS 4.2.6 on build 20200109.","state":0,"publishedAt":"2020-10-28T17:55:18+00:00","modifiedAt":"2026-10-02T03:55:14.588+00:00","affected":[{"ecosystem":"Vendor product","name":"QTS","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"platforms\": [\n                        \"build 20200302\"\n                    ],\n                    \"product\": \"QTS\",\n                    \"vendor\": \"QNAP Systems Inc.\",\n                    \"versions\": [\n                        {\n                            \"lessThan\": \"4.4.2.1231\",\n                            \"status\": \"affected\",\n                            \"version\": \"unspecified\",\n                            \"versionType\": \"custom\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"QTS","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"platforms\": [\n                        \"build 20200130\"\n                    ],\n                    \"product\": \"QTS\",\n                    \"vendor\": \"QNAP Systems Inc.\",\n                    \"versions\": [\n                        {\n                            \"lessThan\": \"4.4.1.1201\",\n                            \"status\": \"affected\",\n                            \"version\": \"unspecified\",\n                            \"versionType\": \"custom\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"QTS","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"platforms\": [\n                        \"build 20200214\"\n                    ],\n                    \"product\": \"QTS\",\n                    \"vendor\": \"QNAP Systems Inc.\",\n                    \"versions\": [\n                        {\n                            \"lessThan\": \"4.3.6.1218\",\n                            \"status\": \"affected\",\n                            \"version\": \"unspecified\",\n                            \"versionType\": \"custom\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"QTS","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"platforms\": [\n                        \"build 20200107\"\n                    ],\n                    \"product\": \"QTS\",\n                    \"vendor\": \"QNAP Systems Inc.\",\n                    \"versions\": [\n                        {\n                            \"lessThan\": \"4.3.4.1190\",\n                            \"status\": \"affected\",\n                            \"version\": \"unspecified\",\n                            \"versionType\": \"custom\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"QTS","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"platforms\": [\n                        \"build 20200109\"\n                    ],\n                    \"product\": \"QTS\",\n                    \"vendor\": \"QNAP Systems Inc.\",\n                    \"versions\": [\n                        {\n                            \"lessThan\": \"4.3.3.1161\",\n                            \"status\": \"affected\",\n                            \"version\": \"unspecified\",\n                            \"versionType\": \"custom\"\n                        },\n                        {\n                            \"lessThan\": \"4.2.6\",\n                            \"status\": \"affected\",\n                            \"version\": \"unspecified\",\n                            \"versionType\": \"custom\"\n                        }\n                    ]\n                }"}],"metrics":[],"references":["https://www.qnap.com/zh-tw/security-advisory/qsa-20-01"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2018-19949","license":"CVE Program Terms of Use","key":"cve-program:CVE-2018-19949","identifiers":["CVE-2018-19949"]},"retained":false,"historicalAffected":[]}],"coverage":[]}