CVE-2021-38684

9.8 criticalEPSS 1.3%

Critical (9.8) in qnap multimedia console. EPSS 1.3% chance of exploitation in the next 30 days.

A stack buffer overflow vulnerability has been reported to affect QNAP NAS running Multimedia Console. If exploited, this vulnerability allows attackers to execute arbitrary code. We have already fixed this vulnerability in the following versions of Multimedia Console: Multimedia Console 1.4.3 ( 2021/10/05 ) and later Multimedia Console 1.5.3 ( 2021/10/05 ) and later

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.3% chance of exploitation in the next 30 days; higher than 70% of CVEs (scores of 2026-10-31)
CWE: CWE-787
Published: 2021-11-13
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

qnap:multimedia_console

References

https://www.qnap.com/en/security-advisory/qsa-21-45
https://www.qnap.com/en/security-advisory/qsa-21-45

Check your stack JSON