CVE:CVE-2021-38691
CNNVD:CNNVD-202201-1170
Qnap Qvr Elite是中国威联通科技（Qnap）公司的一款基于订阅的智能监控解决方案。
QNAP device 存在安全漏洞，该漏洞源于软件中存在基于堆栈的缓冲区溢出漏洞，攻击者可利用该漏洞就可以执行任意代码。
solution:Upgrade qnap qvr_elite to a higher version than 2.1.4.0,and avoid the version (,2.1.4.0); Upgrade qnap qvr_guard to a higher version than 2.1.3.0,and avoid the version (,2.1.3.0); Upgrade qnap qvr_pro to a higher version than 2.1.3.0,and avoid the version (,2.1.3.0)