Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-23362

An OS command injection vulnerability has been reported to affect QNAP operating systems. If exploited, the vulnerability allows remote authenticated users to execute commands via susceptible QNAP devices. We have already fixed the vulnerability in the following versions: QTS 5.0.1.2376 build 20230421 and later QTS 4.5.4.2374 build 20230416 and later QuTS hero h5.0.1.2376 build 20230421 and later QuTS hero h4.5.4.2374 build 20230417 and later QuTScloud c5.0.1.2374 and later

Published

2023-09-22T04:15:50.487

Last Modified

2024-11-21T07:46:01.773

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 8.8 (HIGH)

Weaknesses
  • Type: Secondary
    CWE-78
  • Type: Primary
    CWE-78
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System qnap qts < 4.5.4.2374 Yes
Operating System qnap qts < 5.0.1.2376 Yes
Operating System qnap quts_hero < h4.5.4.2374 Yes
Operating System qnap quts_hero < h5.0.1.2376 Yes
Operating System qnap qutscloud ≤ c5.0.1.2374 Yes
References