Test ID:	1.3.6.1.4.1.25623.1.0.103731
Category:	Web application abuses
Title:	VioStor NVR and QNAP NAS RCE Vulnerability
Summary:	VioStor NVR firmware version 4.0.3 and possibly earlier versions and QNAP NAS; with the Surveillance Station Pro activated contains scripts which could allow; any user e.g. guest users to execute scripts which run with administrative; privileges. It is possible to execute code on the webserver using the ping; function.
Description:	Summary: VioStor NVR firmware version 4.0.3 and possibly earlier versions and QNAP NAS with the Surveillance Station Pro activated contains scripts which could allow any user e.g. guest users to execute scripts which run with administrative privileges. It is possible to execute code on the webserver using the ping function. Solution: Updates are available. Please see the references for more information. CVSS Score: 6.5 CVSS Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2013-0143 CERT/CC vulnerability note: VU#927644 http://www.kb.cert.org/vuls/id/927644
Copyright	Copyright (C) 2013 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.