Vulnerabilities > Qnap > Media Streaming ADD ON > High

DATE CVE VULNERABILITY TITLE RISK
2021-10-22 CVE-2021-34362 Command Injection vulnerability in Qnap Media Streaming Add-On
A command injection vulnerability has been reported to affect QNAP device running Media Streaming add-on.
network
low complexity
qnap CWE-77
7.2
2018-03-08 CVE-2017-7641 Cross-Site Request Forgery (CSRF) vulnerability in Qnap Media Streaming Add-On
QNAP NAS application Media Streaming add-on version 421.1.0.2, 430.1.2.0, and earlier does not utilize CSRF protections.
network
low complexity
qnap CWE-352
8.8