Skip to content
OpenAdvisories
Low WID-SEC-2023-2591 2 CVEs

QNAP NAS: Mehrere Schwachstellen

Published Oct 8, 2023 · Updated Oct 8, 2023 · de-DE

Vendor: QNAP Systems Product: NAS Product: NAS QTS < 4.5.4.2467 build 20230718 Product: NAS QTS < 5.0.1.2425 build 20230609 Product: NAS QTS < 5.1.0.2444 build 20230629 Product: NAS QuTS hero < h4.5.4.2476 build 20230728 Product: NAS QuTS hero < h5.0.1.2515 build 20230907 Product: NAS QuTS hero < h5.1.0.2424 build 20230609 Product: NAS QuTScloud < c5.1.0.2498

Summary

Ein authentifizierter Angreifer kann mehrere Schwachstellen in QNAP NAS ausnutzen, um beliebigen Code auszuführen.

Product

QNAP ist ein Hersteller von NAS (Network Attached Storage) Lösungen.

Vulnerabilities 2

  • Low 3.8
    CVE-2023-32971

    QTS, QuTS hero, QuTScloud

    A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute code via a network. We have already fixed the vu…

    QNAP Systems QTS QuTS hero QuTScloud
  • Low 3.8
    CVE-2023-32972

    QTS, QuTS hero, QuTScloud

    A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute code via a network. We have already fixed the vu…

    QNAP Systems QTS QuTS hero QuTScloud

Revision history

  1. #1

    Initiale Fassung

References