Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-32967

An incorrect authorization vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users to bypass intended access restrictions via a network. QTS 5.x, QuTS hero are not affected. We have already fixed the vulnerability in the following versions: QuTScloud c5.1.5.2651 and later QTS 4.5.4.2627 build 20231225 and later

Published

2024-02-02T16:15:46.573

Last Modified

2024-11-21T08:04:18.523

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 5.0 (MEDIUM)

Weaknesses
  • Type: Secondary
    CWE-285
    CWE-863
  • Type: Primary
    CWE-863
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System qnap qts 4.5.4.1715 Yes
Operating System qnap qts 4.5.4.1723 Yes
Operating System qnap qts 4.5.4.1741 Yes
Operating System qnap qts 4.5.4.1787 Yes
Operating System qnap qts 4.5.4.1800 Yes
Operating System qnap qts 4.5.4.1892 Yes
Operating System qnap qts 4.5.4.1931 Yes
Operating System qnap qts 4.5.4.2012 Yes
Operating System qnap qts 4.5.4.2117 Yes
Operating System qnap qts 4.5.4.2280 Yes
Operating System qnap qts 4.5.4.2374 Yes
Operating System qnap qts 4.5.4.2627 Yes
Operating System qnap qutscloud c5.1.0.2498 Yes
References