CVE-2013-0143

no score yetEPSS 7.0%

cgi-bin/pingping.cgi on QNAP VioStor NVR devices with firmware 4.0.3, and in the Surveillance Station Pro component in QNAP NAS, allows remote authenticated users to execute arbitrary commands by leveraging guest access and placing shell metacharacters in the query string.

EPSS: 7.0% chance of exploitation in the next 30 days; higher than 94% of CVEs (scores of 2026-10-31)
CWE: CWE-94
Published: 2013-06-07
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

qnap:nas
qnap:surveillance_station_pro
qnap:viostor_network_video_recorder

References

http://www.kb.cert.org/vuls/id/927644
http://www.kb.cert.org/vuls/id/927644

Check your stack JSON