Security Alert (A23-11-09): Vulnerability in QNAP Products

Description:

QNAP has published a security advisory to address a vulnerability in QNAP products. The details of security updates can be found at:
https://www.qnap.com/en/security-advisory/QSA-23-24

Affected Systems:

• QNAP NAS devices running QTS operating system versions prior to 5.0.1.2376 build 20230421
• QNAP NAS devices running QuTS hero operating system versions prior to h5.0.1.2376 build 20230421
• QNAP NAS devices running QuTScloud version prior to c5.1.0.2498

For detailed information of the affected products, please refer to the corresponding security advisory at vendor's website.

Impact:

Successful exploitation of the vulnerability could lead to arbitrary command injection on an affected system.

Recommendation:

Patches for affected products are available. System administrators of affected products should follow the recommendations provided by the product vendor and take immediate actions to mitigate the risk.

More Information:

• https://www.qnap.com/en/security-advisory/QSA-23-24
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-23367