CVE:CVE-2020-2509
CNNVD:CNNVD-202104-1224
Qnap Systems QNAP QTS是中国Qnap Systems公司的一款类似SAN存储架构的数据存储设备。该设备支持分层存储、镜像保护等保障功能。QNAP Systems QUTS Hero是中国QNAP Systems公司的一款用于管理文件的NAS操作系统。该系统保留了QTS的应用生态，整合更强大的128位ZFS文件系统，为企业提供更稳定可靠的NAS存储解决方案。
QTS and QuTS hero 存在命令注入漏洞，该漏洞源于攻击者可利用该漏洞就可以在一个被破坏的应用程序中执行任意命令。
solution:Upgrade qnap qts to a higher version than 4.3.3.0174,4.3.3.0868,4.3.3.0998,4.3.3.1051,4.3.3.1098,4.3.3.1161,4.3.3.1252,4.3.3.1315,4.3.3.1386,4.3.3.1432,4.2.6,4.3.6,4.5.1,4.2.6,4.2.6:build_20170517,4.2.6:build_20190322,4.2.6:build_20190730,4.2.6:build_20190921,4.2.6:build_20191107,4.2.6:build_20200109,4.2.6:build_20200421,4.2.6:build_20200611,4.2.6:build_20200821,4.3.4.0358,4.3.4.0358:beta1,4.3.4.0370,4.3.4.0370:beta1,4.3.4.0372,4.3.4.0372:beta1,4.3.4.0374,4.3.4.0374:beta1,4.3.4.0387,4.3.4.0387:beta2,4.3.4.0411,4.3.4.0416,4.3.4.0427,4.3.4.0434,4.3.4.0435,4.3.4.0451,4.3.4.0483,4.3.4.0486,4.3.4.0506,4.3.4.0516,4.3.4.0526,4.3.4.0551,4.3.4.0557,4.3.4.0561,4.3.4.0569,4.3.4.0593,4.3.4.0597,4.3.4.0604,4.3.4.0899,4.3.4.1029,4.3.4.1082,4.3.4.1190,4.3.4.1282,4.3.4.1368,4.3.4.1417,4.3.4.1463,4.3.6,4.3.6.0895,4.3.6.0907,4.3.6.0923,4.3.6.0944,4.3.6.0959,4.3.6.0979,4.3.6.0993,4.3.6.1013,4.3.6.1033,4.3.6.1070,4.3.6.1154,4.3.6.1218,4.3.6.1263,4.3.6.1286,4.3.6.1333,4.3.6.1411,4.3.6.1446,4.5.1,4.5.1.1456,4.5.1.1461,4.5.1.1465,4.5.1.1480,4.5.2,and avoid the version 4.3.3.0174,4.3.3.0868,4.3.3.0998,4.3.3.1051,4.3.3.1098,4.3.3.1161,4.3.3.1252,4.3.3.1315,4.3.3.1386,4.3.3.1432,(,4.2.6),[4.3.5,4.3.6),[4.4.0,4.5.1),4.2.6,4.2.6:build_20170517,4.2.6:build_20190322,4.2.6:build_20190730,4.2.6:build_20190921,4.2.6:build_20191107,4.2.6:build_20200109,4.2.6:build_20200421,4.2.6:build_20200611,4.2.6:build_20200821,4.3.4.0358,4.3.4.0358:beta1,4.3.4.0370,4.3.4.0370:beta1,4.3.4.0372,4.3.4.0372:beta1,4.3.4.0374,4.3.4.0374:beta1,4.3.4.0387,4.3.4.0387:beta2,4.3.4.0411,4.3.4.0416,4.3.4.0427,4.3.4.0434,4.3.4.0435,4.3.4.0451,4.3.4.0483,4.3.4.0486,4.3.4.0506,4.3.4.0516,4.3.4.0526,4.3.4.0551,4.3.4.0557,4.3.4.0561,4.3.4.0569,4.3.4.0593,4.3.4.0597,4.3.4.0604,4.3.4.0899,4.3.4.1029,4.3.4.1082,4.3.4.1190,4.3.4.1282,4.3.4.1368,4.3.4.1417,4.3.4.1463,4.3.6,4.3.6.0895,4.3.6.0907,4.3.6.0923,4.3.6.0944,4.3.6.0959,4.3.6.0979,4.3.6.0993,4.3.6.1013,4.3.6.1033,4.3.6.1070,4.3.6.1154,4.3.6.1218,4.3.6.1263,4.3.6.1286,4.3.6.1333,4.3.6.1411,4.3.6.1446,4.5.1,4.5.1.1456,4.5.1.1461,4.5.1.1465,4.5.1.1480,4.5.2; Upgrade qnap quts_hero to a higher version than h4.5.1,h4.5.1,h4.5.1.1472,and avoid the version (,h4.5.1),h4.5.1,h4.5.1.1472