Skip to content
OpenAdvisories
Medium WID-SEC-2023-3089 3 CVEs

QNAP NAS: Mehrere Schwachstellen

Published Dec 10, 2023 · Updated Dec 10, 2023 · de-DE

Vendor: QNAP Systems Product: NAS Product: NAS < QTS 5.0.1.2514 build 20230906 Product: NAS < QTS 5.1.2.2533 build 20230926 Product: NAS < QuTS hero h5.1.2.2534 build 20230927 Product: NAS QTS < 4.5.4.2467 build 20230718 Product: NAS QTS < 5.0.1.2425 build 20230609 Product: NAS QTS < 5.1.0.2444 build 20230629 Product: NAS QuTS hero < h4.5.4.2476 build 20230728 Product: NAS QuTS hero < h5.0.1.2515 build 20230907 Product: NAS QuTS hero < h5.1.0.2424 build 20230609

Summary

Ein Angreifer kann mehrere Schwachstellen in QNAP NAS ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen oder Code auszuführen.

Product

QNAP ist ein Hersteller von NAS (Network Attached Storage) Lösungen.

Vulnerabilities 3

  • Medium 6.5
    CVE-2023-23372

    QTS, QuTS hero

    A cross-site scripting (XSS) vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to inject malicious code via a network. We have already fixed the vulnerability in the following v…

    QNAP Systems QTS QuTS hero
  • Medium 4.9
    CVE-2023-32975

    QTS, QuTS hero

    A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute code via a network. We have already fixed the vu…

    QNAP Systems QTS QuTS hero
  • Medium 4.5
    CVE-2023-32968

    QTS, QuTS hero

    A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute code via a network. We have already fixed the vu…

    QNAP Systems QTS QuTS hero

Revision history

  1. #1

    Initiale Fassung

References