Medium WID-SEC-2023-2877 1 CVE

QNAP NAS: Schwachstelle ermöglicht Codeausführung

Published Nov 12, 2023 · Updated Nov 12, 2023 · de-DE

Vendor: QNAP Systems Product: NAS Product: NAS < QTS 5.0.1.2376 build 20230421 Product: NAS QuTS hero < 5.0.1.2376 build 20230421 Product: NAS QuTScloud < 5.1.0.2498

Summary

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in QNAP NAS ausnutzen, um beliebigen Programmcode auszuführen.

Product

QNAP ist ein Hersteller von NAS (Network Attached Storage) Lösungen.

Vulnerabilities 1

Medium 4.7

CVE-2023-23367

QTS, QuTS hero, QuTScloud

An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute commands via a network. We have already fixed the vulnerability in th…

QNAP Systems QTS QuTS hero QuTScloud

Nov 10, 2023

Revision history

2023-11-12 #1
Initiale Fassung

References

Github Security Advisory vom 2023-11-12
https://github.com/advisories/GHSA-p49w-7qqv-rf9v
QNAP Security Advisory - QSA-23-24 vom 2023-11-12
https://www.qnap.com/de-de/security-advisory/QSA-23-24