CVE-2021-34343

HighCVSS 7.2/10Last modified Jun 17, 2026

Description

A stack buffer overflow vulnerability has been reported to affect QNAP device running QTS, QuTScloud, QuTS hero. If exploited, this vulnerability allows attackers to execute arbitrary code. We have already fixed this vulnerability in the following versions of QTS, QuTScloud, QuTS hero: QTS 4.5.4.1715 build 20210630 and later QTS 5.0.0.1716 build 20210701 and later QuTScloud c4.5.6.1755 and later QuTS hero h4.5.4.1771 build 20210825 and later

Metrics

CVSS 3.1 7.2/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

No affected versions have been published.

Timeline

Published
Sep 10, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-343449.8A stack buffer overflow vulnerability has been reported to affect QNAP device running QUSBCam2. If exploited, this vulnerability allows attaCVE-2021-343459.8A stack buffer overflow vulnerability has been reported to affect QNAP device running NVR Storage Expansion. If exploited, this vulnerabilitCVE-2021-343469.8A stack buffer overflow vulnerability has been reported to affect QNAP device running NVR Storage Expansion. If exploited, this vulnerabilitCVE-2021-343489.8A command injection vulnerability has been reported to affect QNAP device running QVR. If exploited, this vulnerability could allow remote aCVE-2021-343497.2A command injection vulnerability has been reported to affect QNAP device running QVR. If exploited, this vulnerability could allow remote aCVE-2021-34353.3Information leakage in le_ecred_conn_req(). Zephyr versions >= v2.4.0 Use of Uninitialized Resource (CWE-908). For more information, see httCVE-2021-343519.8A command injection vulnerability has been reported to affect QNAP device running QVR. If exploited, this vulnerability could allow remote aCVE-2021-343529.8A command injection vulnerability has been reported to affect QNAP device running QVR. If exploited, this vulnerability could allow remote aCVE-2021-343545.4A cross-site scripting (XSS) vulnerability has been reported to affect QNAP device running Photo Station. If exploited, this vulnerability aCVE-2021-343555.4A cross-site scripting (XSS) vulnerability has been reported to affect QNAP NAS running Photo Station. If exploited, this vulnerability alloCVE-2021-343565.4A cross-site scripting (XSS) vulnerability has been reported to affect QNAP device running Photo Station. If exploited, this vulnerability aCVE-2021-343576.1A cross-site scripting (XSS) vulnerability has been reported to affect QNAP device running QmailAgent. If exploited, this vulnerability allo
CVE-2021-34343: High severity, CVSS 7.2 | Vulnix