Skip to content
OpenAdvisories
Medium WID-SEC-2023-2650 3 CVEs

QNAP NAS: Mehrere Schwachstellen

Published Oct 15, 2023 · Updated Oct 15, 2023 · de-DE

Vendor: QNAP Systems Product: NAS Product: NAS QTS < 4.5.4.2467 build 20230718 Product: NAS QTS < 5.0.1.2425 build 20230609 Product: NAS QTS < 5.1.0.2444 build 20230629 Product: NAS QuTS hero < h4.5.4.2476 build 20230728 Product: NAS QuTS hero < h5.0.1.2515 build 20230907 Product: NAS QuTS hero < h5.1.0.2424 build 20230609 Product: NAS QuTScloud < c5.1.0.2498 Platform: Linux

Summary

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in QNAP NAS ausnutzen, um einen Denial of Service Angriff durchzuführen, beliebigen Programmcode auszuführen oder Informationen offenzulegen.

Product

QNAP ist ein Hersteller von NAS (Network Attached Storage) Lösungen.

Vulnerabilities 3

  • High 7.5
    CVE-2023-32974

    QTS, QuTS hero, QuTScloud

    A path traversal vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to read the contents of unexpected files and expose sensitive data via a network. We have already fixed the vu…

    QNAP Systems QTS QuTS hero QuTScloud
  • Medium 4.9
    CVE-2023-32970

    QTS, QuTS hero, QuTScloud

    A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to launch a denial-of-service (DoS) attack via a network. QES is not affected…

    QNAP Systems QTS QuTS hero QuTScloud
  • Low 3.8
    CVE-2023-32973

    QTS, QuTS hero, QuTScloud

    A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute code via a network. We have already fixed the vu…

    QNAP Systems QTS QuTS hero QuTScloud

Revision history

  1. #1

    Initiale Fassung

References