{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-09-30T00:59:26.453","vulnerabilities":[{"cve":{"id":"CVE-2018-14748","sourceIdentifier":"security@qnapsecurity.com.tw","published":"2018-11-28T16:29:00.327","lastModified":"2026-06-17T01:41:34.217","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Improper Authorization vulnerability in QTS 4.3.5 build 20181013, QTS 4.3.4 build 20181008, QTS 4.3.3 build 20180829, QTS 4.2.6 build 20180829 and earlier versions could allow remote attackers to power off the NAS."},{"lang":"es","value":"Vulnerabilidad de autorización incorrecta en QTS 4.3.5 build 20181013, QTS 4.3.4 build 20181008, QTS 4.3.3 build 20180829 y QTS 4.2.6 build 20180829 y sus versiones anteriores podría permitir que los atacantes remotos apaguen el NAS."}],"affected":[{"source":"security@qnapsecurity.com.tw","affectedData":[{"vendor":"QNAP","product":"QNAP QTS","versions":[{"version":"QTS 4.3.5 build 20181013, QTS 4.3.4 build 20181008, QTS 4.3.3 build 20180829, QTS 4.2.6 build 20180829 and earlier versions","status":"affected"}]}]}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:N/A:C","baseScore":7.8,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-863"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:qnap:qts:4.2.6:*:*:*:*:*:*:*","matchCriteriaId":"1D9E6F8F-A433-45A7-8839-5D478FE179A4"},{"vulnerable":true,"criteria":"cpe:2.3:o:qnap:qts:4.3.3:*:*:*:*:*:*:*","matchCriteriaId":"C5994C07-17FE-4784-9FA4-9675BA8B4743"},{"vulnerable":true,"criteria":"cpe:2.3:o:qnap:qts:4.3.4:*:*:*:*:*:*:*","matchCriteriaId":"F0C7D2D4-769F-4297-89F4-75366FFA7618"},{"vulnerable":true,"criteria":"cpe:2.3:o:qnap:qts:4.3.5:*:*:*:*:*:*:*","matchCriteriaId":"2C7CF3D8-0BB6-410F-84C1-D48764687561"}]}]}],"references":[{"url":"https://www.qnap.com/zh-tw/security-advisory/nas-201811-22","source":"security@qnapsecurity.com.tw","tags":["Vendor Advisory"]},{"url":"https://www.qnap.com/zh-tw/security-advisory/nas-201811-22","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}}]}