Music station

This hub aggregates every CVE we track for Music station, a product in the hardware firmware space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 13 most recently published vulnerabilities affecting Music station.

• CVE-2023-45038Music Station4.3Sep 6, 2024
• CVE-2023-39299Music Station7.5Nov 3, 2023
• CVE-2023-23366Music Station7.7Oct 6, 2023
• CVE-2023-23365Music Station7.7Oct 6, 2023
• CVE-2020-36197Improper Access Control Vulnerability in Music Station7.1May 13, 2021
• CVE-2020-2494Cross-site Scripting Vulnerability in Music Station6.1Dec 10, 2020
• CVE-2018-19952If exploited, this SQL injection vulnerability could allow remote attackers to obtain application information. This issue affects: QNAP Systems Inc. Music Station versions prior to 5.1.13; versions...7.5Nov 2, 2020
• CVE-2018-19951If exploited, this cross-site scripting vulnerability could allow remote attackers to inject malicious code. This issue affects: QNAP Systems Inc. Music Station versions prior to 5.1.13; versions p...6.1Nov 2, 2020
• CVE-2018-19950If exploited, this command injection vulnerability could allow remote attackers to execute arbitrary commands. This issue affects: QNAP Systems Inc. Music Station versions prior to 5.1.13; versions...9.8Nov 2, 2020
• CVE-2019-7185This cross-site scripting (XSS) vulnerability in Music Station allows remote attackers to inject and execute scripts on the administrator’s management console. To fix this vulnerability, QNAP rec...4.8Dec 5, 2019
• CVE-2018-0729This command injection vulnerability in Music Station allows attackers to execute commands on the affected device. To fix the vulnerability, QNAP recommend updating Music Station to their latest ve...9.8Dec 4, 2019
• CVE-2018-0718Command injection vulnerability in Music Station 5.1.2 and earlier versions in QNAP QTS 4.3.3 and 4.3.4 could allow remote attackers to run arbitrary commands in the compromised application.9.8Sep 14, 2018
• CVE-2017-13069QNAP discovered a number of command injection vulnerabilities found in Music Station versions 4.8.6 (for QTS 4.2.x), 5.0.7 (for QTS 4.3.x), and earlier. If exploited, these vulnerabilities may allo...9.8Oct 6, 2017