← Database

CVE-2023-23367

MEDIUM CVSS: 4.7 Published: 2023-11-10 Modified: 2026-06-17

Description

An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute commands via a network. We have already fixed the vulnerability in the following versions: QTS 5.0.1.2376 build 20230421 and later QuTS hero h5.0.1.2376 build 20230421 and later QuTScloud c5.1.0.2498 and later

Affected Platforms

Qnap QutscloudQnap Quts HeroQnap Qts

Weakness Type

CWE-78

References