GobyVuls/CVE-2022-27596.md

QNAP-NAS authLogin.cgi app_token RCE Vulnerability (CVE-2022-27596)

Vulnerability	QNAP-NAS authLogin.cgi app_token RCE Vulnerability (CVE-2022-27596)
Chinese name	QNAP-NAS authLogin.cgi 文件 app_token 参数代码执行漏洞（CVE-2022-27596）
CVSS core	9.0
FOFA Query (click to view the results directly)	(((header="http server" && body="redirect_suffix") || body="/css/qnap-default.css" || body="/redirect.html?count=\"+Math.random()" || body="/indexnas.cgi?counter=") && body!="Server: couchdb") || (body="qnap_hyperlink" && body="QNAP Systems, Inc.</a > All Rights Reserved.")
Number of assets affected	2262781
Description	QNAP Systems QTS is an operating system used by China's QNAP Systems for entry-level to mid-level QNAP NAS. There is a security vulnerability in QNAP Systems QTS. The vulnerability stems from the fact that devices running QuTS hero and QTS allow remote attackers to inject malicious code into the app_token parameter field to obtain server permissions.
Impact	There is a security vulnerability in QNAP Systems QTS. The vulnerability stems from the fact that devices running QuTS hero and QTS allow remote attackers to inject malicious code into the app_token parameter field to obtain server permissions.