CVE-2017-7639

5.3 mediumEPSS 1.1%

QNAP NAS application Proxy Server through version 1.2.0 does not authenticate requests properly. Successful exploitation can lead to change of the settings of Proxy Server.

Severity

CVSS 3.0

5.3 medium

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

EPSS: 1.1% chance of exploitation in the next 30 days; higher than 64% of CVEs (scores of 2026-10-31)
CWE: CWE-287
Published: 2018-06-05
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

qnap:nas_proxy_server

References

http://www.securitytracker.com/id/1041025
https://www.qnap.com/en/security-advisory/nas-201806-01
http://www.securitytracker.com/id/1041025
https://www.qnap.com/en/security-advisory/nas-201806-01

Check your stack JSON