Security Alert (A23-11-09): Vulnerability in QNAP Products


 

Published on: 13 November 2023

  
  

Description:

QNAP has published a security advisory to address a vulnerability in QNAP products. The details of security updates can be found at:
https://www.qnap.com/en/security-advisory/QSA-23-24

 

Affected Systems:

  • QNAP NAS devices running QTS operating system versions prior to 5.0.1.2376 build 20230421
  • QNAP NAS devices running QuTS hero operating system versions prior to h5.0.1.2376 build 20230421
  • QNAP NAS devices running QuTScloud version prior to c5.1.0.2498

For detailed information of the affected products, please refer to the corresponding security advisory at vendor's website.

 

Impact:

Successful exploitation of the vulnerability could lead to arbitrary command injection on an affected system.

 

Recommendation:

Patches for affected products are available. System administrators of affected products should follow the recommendations provided by the product vendor and take immediate actions to mitigate the risk.

 

More Information:

  • https://www.qnap.com/en/security-advisory/QSA-23-24
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-23367


Tag:
Tags