Description
An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to execute commands via a network.
We have already fixed the vulnerability in the following versions:
QTS 5.1.5.2645 build 20240116 and later
QuTS hero h5.1.5.2647 build 20240118 and later
QuTScloud c5.1.5.2651 and later
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| QNAP Systems | QTS | 5.1.x – < 5.1.5.2645 build 20240116 | 5.1.5.2645 build 20240116 |
| QNAP Systems | QuTS hero | h5.1.x – < h5.1.5.2647 build 20240118 | h5.1.5.2647 build 20240118 |
| QNAP Systems | QuTScloud | c5.x – < c5.1.5.2651 | c5.1.5.2651 |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Metasploit 1 module
-
QNAP QTS and QuTS Hero Unauthenticated Remote Code Execution in quick.cgi
exploit/linux/http/qnap_qts_rce_cve_2023_47218
GitHub 1 repository
-
passwa11/CVE-2023-47218 ★ 0 · Feb 19, 2024
CVE-2023-47218: QNAP QTS and QuTS Hero Unauthenticated Command Injection (FIXED)
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Automated scanner template
A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.
- QNAP QTS and QuTS Hero - OS Command Injection http/cves/2023/CVE-2023-47218.yaml
Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.
Advisories 1
- WID-SEC-2024-0353 QNAP NAS: Mehrere Schwachstellen ermöglichen Codeausführung BSI CERT-Bund (WID) · Feb 22, 2024