{"id":"CVE-2020-36195","published":"2021-04-17T03:50:13Z","modified":"2024-09-16T17:28:07Z","title":"SQL Injection Vulnerability in Multimedia Console and the Media Streaming Add-On","vendor":"QNAP Systems Inc.","product":"QTS","tier":"core","eol":null,"affectedVersions":[{"vendor":"QNAP Systems Inc.","product":"QTS","versions":[">= unspecified, < 4.3.3.1624 Build 20210416",">= unspecified, < 4.3.6.1620 Build 20210322"]},{"vendor":"QNAP Systems Inc.","product":"Media Streaming add-on","versions":[">= unspecified, < 430.1.8.10",">= unspecified, < 430.1.8.8"]},{"vendor":"QNAP Systems Inc.","product":"Multimedia Console","versions":[">= unspecified, < 1.3.4"]}],"description":{"text":"An SQL injection vulnerability has been reported to affect QNAP NAS running Multimedia Console or the Media Streaming add-on. If exploited, the vulnerability allows remote attackers to obtain application information. QNAP has already fixed this vulnerability in the following versions of Multimedia Console and the Media Streaming add-on. QTS 4.3.3: Media Streaming add-on 430.1.8.10 and later QTS 4.3.6: Media Streaming add-on 430.1.8.8 and later QTS 4.4.x and later: Multimedia Console 1.3.4 and later We have also fixed this vulnerability in the following versions of QTS 4.3.3 and QTS 4.3.6, respectively: QTS 4.3.3.1624 Build 20210416 or later QTS 4.3.6.1620 Build 20210322 or later","provenance":"source","from":"CVE.org"},"summary":{"text":"An SQL injection flaw in QNAP QTS NAS devices affects the Multimedia Console and Media Streaming add-on, where improper neutralization of special elements in SQL commands and data queries exists. A remote, unauthenticated attacker with network access to the device can exploit it without any user interaction to obtain application information.","provenance":"ai","model":"claude-haiku-5-5","generatedAt":"2026-10-31T05:10:24Z"},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","provenance":"source","from":"CVE.org CNA"},"epss":{"score":0.01765,"percentile":0.78039,"date":"2026-10-30","provenance":"source"},"kev":null,"vulncheckKev":{"dateAdded":"2021-07-28","exploitedFirstSeen":"2021-07-28","ransomware":true,"evidence":[{"url":"https://www.secureblink.com/threat-research/qlocker-ransomware","date":"2021-07-28"},{"url":"https://cybersecurityworks.com/howdymanage/uploads/file/Spotlight%20Report%20-%20Index%20Update%20Q2%20-%20Q3%20-%20Final%20Version_compressed.pdf","date":"2022-05-18"},{"url":"https://www.ivanti.com/resources/v/doc/pr-survey-report/ransomware-quarterly-indexreport_q2-q3","date":"2022-10-21"},{"url":"https://info.securin.io/hubfs/Securin%20Ransomware%20Report%202023.pdf","date":"2023-02-14"},{"url":"https://4502402.fs1.hubspotusercontent-na1.net/hubfs/4502402/Ransomware%20-%20Index%20Update%20Q1%202023.pdf","date":"2023-05-15"},{"url":"https://4502402.fs1.hubspotusercontent-na1.net/hubfs/4502402/Ransomware%202023%20Year%20in%20Review.pdf","date":"2024-01-24"},{"url":"https://go.recordedfuture.com/hubfs/reports/cta-2024-0208.pdf","date":"2024-02-08"}],"evidenceTotal":7,"provenance":"source"},"exploited":true,"otx":{"pulseCount":0,"pulses":[],"provenance":"machine"},"cwes":[{"id":"CWE-20","name":"Improper Input Validation"},{"id":"CWE-89","name":"Improper Neutralization of Special Elements used in an SQL Command"},{"id":"CWE-943","name":"Improper Neutralization of Special Elements in Data Query Logic"}],"references":[{"url":"https://www.qnap.com/en/security-advisory/qsa-21-11","tags":["x_refsource_MISC"]}],"techniques":[],"reports":[],"affected":[],"advisories":[],"euvd":{"id":"EUVD-2020-23759","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-23759","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[],"exploitSources":null,"exploitRefs":[],"flow":[],"timeline":[{"date":"2021-04-17","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2020-36195","provenance":"source"},{"date":"2021-07-28","kind":"exploited-reported","label":"Exploitation first reported (VulnCheck KEV evidence)","url":"https://www.secureblink.com/threat-research/qlocker-ransomware","provenance":"source"}],"speed":{"daysToPublicExploit":null,"firstExploitFrom":null,"daysToKev":null},"priority":{"score":67.5,"factors":[{"name":"In a KEV catalog","points":35.0,"detail":"listed in VulnCheck KEV"},{"name":"Recent KEV listing","points":0.0,"detail":"added 1921 days ago"},{"name":"Known ransomware use","points":10.0,"detail":"VulnCheck KEV: Known"},{"name":"EPSS percentile","points":15.61,"detail":"percentile 0.7804"},{"name":"Named in threat reports","points":0.0,"detail":"0 reports"},{"name":"Public exploit code","points":0.0,"detail":"none found"},{"name":"Mentioned in OTX pulses","points":0.0,"detail":"0 pulses"},{"name":"CVSS severity","points":6.86,"detail":"base score 9.8"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]}}