{"id":"CVE-2018-0707","published":"2018-07-16T15:00:00Z","modified":"2024-09-16T17:22:44Z","title":"Command injection vulnerability in change password of QNAP Q'center Virtual Appliance version 1.7.1063 and earlier…","vendor":"QNAP","product":"Q'center Virtual Appliance","tier":"core","eol":null,"affectedVersions":[{"vendor":"QNAP","product":"Q'center Virtual Appliance","versions":["1.7.1063 and earlier"]}],"description":{"text":"Command injection vulnerability in change password of QNAP Q'center Virtual Appliance version 1.7.1063 and earlier could allow authenticated users to run arbitrary commands.","provenance":"source","from":"CVE.org"},"summary":{"text":"The vulnerability is a command injection flaw in the change password functionality of QNAP's Q'center Virtual Appliance, affecting version 1.7.1063 and earlier. An attacker who is already authenticated to the appliance could exploit it to run arbitrary commands on the system.","provenance":"ai","model":"claude-haiku-5-5","generatedAt":"2026-10-29T07:21:12Z"},"cvss":null,"epss":{"score":0.58798,"percentile":0.99103,"date":"2026-10-28","provenance":"source"},"kev":null,"vulncheckKev":null,"exploited":false,"otx":{"pulseCount":0,"pulses":[],"provenance":"machine"},"cwes":[],"references":[{"url":"https://www.exploit-db.com/exploits/45015/","tags":["exploit","x_refsource_EXPLOIT-DB"]},{"url":"https://www.coresecurity.com/advisories/qnap-qcenter-virtual-appliance-multiple-vulnerabilities","tags":["x_refsource_MISC"]},{"url":"http://seclists.org/fulldisclosure/2018/Jul/45","tags":["mailing-list","x_refsource_FULLDISC"]},{"url":"http://packetstormsecurity.com/files/148515/QNAP-Qcenter-Virtual-Appliance-1.6.x-Information-Disclosure-Command-Injection.html","tags":["x_refsource_MISC"]},{"url":"https://www.exploit-db.com/exploits/45043/","tags":["exploit","x_refsource_EXPLOIT-DB"]},{"url":"https://www.qnap.com/zh-tw/security-advisory/nas-201807-10","tags":["x_refsource_CONFIRM"]},{"url":"https://www.securityfocus.com/archive/1/542141/100/0/threaded","tags":["mailing-list","x_refsource_BUGTRAQ"]}],"techniques":[],"reports":[],"affected":[],"advisories":[],"euvd":{"id":"EUVD-2018-1517","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-1517","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[{"id":45015,"url":"https://www.exploit-db.com/exploits/45015","title":"QNAP Qcenter Virtual Appliance - Multiple Vulnerabilities","type":"webapps","platform":"hardware","date":"2018-07-13","verified":true,"provenance":"source"},{"id":45043,"url":"https://www.exploit-db.com/exploits/45043","title":"QNAP Q'Center - 'change_passwd' Command Execution (Metasploit)","type":"remote","platform":"linux","date":"2018-07-17","verified":true,"provenance":"source"},{"id":45043,"url":"https://www.exploit-db.com/exploits/45043","title":"QNAP Q'Center - 'change_passwd' Command Execution (Metasploit)","type":"remote","platform":"linux","date":"2018-07-17","verified":true,"provenance":"source"}],"exploitSources":{"exploitdb":{"count":3,"earliest":"2018-07-13"},"metasploit":[{"name":"QNAP Q'Center change_passwd Command Execution","module":"exploit/linux/http/qnap_qcenter_change_passwd_exec","type":"exploit","disclosureDate":"2018-07-11","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/qnap_qcenter_change_passwd_exec.rb"}],"first":{"date":"2018-07-11","source":"Metasploit","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/qnap_qcenter_change_passwd_exec.rb"},"provenance":"source"},"exploitRefs":["https://www.exploit-db.com/exploits/45015/","https://www.exploit-db.com/exploits/45043/","http://packetstormsecurity.com/files/148515/QNAP-Qcenter-Virtual-Appliance-1.6.x-Information-Disclosure-Command-Injection.html"],"flow":[],"timeline":[{"date":"2018-07-11","kind":"exploit-public","label":"First public exploit: Metasploit; later: Exploit-DB 2018-07-13","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/qnap_qcenter_change_passwd_exec.rb","provenance":"source"},{"date":"2018-07-16","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2018-0707","provenance":"source"}],"speed":{"daysToPublicExploit":null,"firstExploitFrom":"Metasploit","daysToKev":null},"priority":{"score":24.8,"factors":[{"name":"In a KEV catalog","points":0.0,"detail":"not listed"},{"name":"Recent KEV listing","points":0.0,"detail":"not listed"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":19.82,"detail":"percentile 0.9910"},{"name":"Named in threat reports","points":0.0,"detail":"0 reports"},{"name":"Public exploit code","points":5.0,"detail":"2 NVD references tagged Exploit; 3 Exploit-DB entries; 1 NVD exploit link; 1 Metasploit module"},{"name":"Mentioned in OTX pulses","points":0.0,"detail":"0 pulses"},{"name":"CVSS severity","points":0.0,"detail":"no CVSS"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]}}