Description
A vulnerability has been reported to affect QNAP operating systems. If exploited, the out-of-bounds read vulnerability allows remote authenticated administrators to get secret values. The vulnerability affects the following QNAP operating systems: QTS, QuTS hero, QuTScloud, QVP (QVR Pro appliances) We have already fixed the vulnerability in the following versions: QTS 5.0.1.2346 build 20230322 and later QuTS hero h5.0.1.2348 build 20230324 and later
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| QNAP Systems | QTS | unspecified – < 5.0.1.2346 build 20230322 | 5.0.1.2346 build 20230322 |
| QNAP Systems | QuTS hero | unspecified – < h5.0.1.2348 build 20230324 | h5.0.1.2348 build 20230324 |
Advisories 1
- WID-SEC-2023-0785 QNAP NAS: Mehrere Schwachstellen BSI CERT-Bund (WID) · Mar 29, 2023