Skip to content
OpenAdvisories
Medium WID-SEC-2023-0785 3 CVEs

QNAP NAS: Mehrere Schwachstellen

Published Mar 28, 2023 · Updated Mar 29, 2023 · Revision 2 · de-DE

Vendor: QNAP Systems Product: NAS Product: NAS < QTS 5.0.1.2346 build 20230322 Product: NAS < QuTS hero h5.0.1.2348 build 20230324 Platform: Linux

Summary

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in QNAP NAS ausnutzen, um beliebigen Programmcode auszuführen oder Informationen offenzulegen.

Product

QNAP ist ein Hersteller von NAS (Network Attached Storage) Lösungen.

Vulnerabilities 3

  • Medium 6.6
    CVE-2023-23355

    QTS, QuTS hero, QuTScloud, QVP (QVR Pro appliances), QVR

    An OS command injection vulnerability has been reported to affect QNAP operating systems. If exploited, the vulnerability possibly allows remote authenticated administrators to execute commands via unspecified vectors. QES is not affected. We have already fix…

    QNAP Systems QTS QuTS hero QuTScloud
  • Low 2.7
    CVE-2022-27597

    QTS, QuTS hero, QuTScloud, QVP (QVR Pro appliances)

    A vulnerability has been reported to affect QNAP operating systems. If exploited, the out-of-bounds read vulnerability allows remote authenticated administrators to get secret values. The vulnerability affects the following QNAP operating systems: QTS, QuTS h…

    QNAP Systems QTS QuTS hero
  • Low 2.7
    CVE-2022-27598

    QTS, QuTS hero, QuTScloud, QVP (QVR Pro appliances)

    A vulnerability has been reported to affect QNAP operating systems. If exploited, the out-of-bounds read vulnerability allows remote authenticated administrators to get secret values. The vulnerability affects the following QNAP operating systems: QTS, QuTS h…

    QNAP Systems QTS QuTS hero

Revision history

  1. #2

    Neue Updates von QNAP aufgenommen

  2. #1

    Initiale Fassung

References