Количество 3
Количество 3
CVE-2023-23356
A command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to execute arbitrary commands. We have already fixed the vulnerability in the following versions: QuFirewall 2.3.3 ( 2023/03/27 ) and later and later
GHSA-7q2m-5cgc-3v5r
A command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to execute arbitrary commands. We have already fixed the vulnerability in the following versions: QuFirewall 2.3.3 ( 2023/03/27 ) and later and later
BDU:2024-11470
Уязвимость встроенного межсетевого экрана QuFirewall для защиты данных на устройствах NAS QNAP, связанная с непринятием мер по чистке данных на управляющем уровне, позволяющая нарушителю выполнять произвольные команды
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2023-23356 A command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to execute arbitrary commands. We have already fixed the vulnerability in the following versions: QuFirewall 2.3.3 ( 2023/03/27 ) and later and later | CVSS3: 5.5 | 0% Низкий | около 1 года назад |
| GHSA-7q2m-5cgc-3v5r A command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to execute arbitrary commands. We have already fixed the vulnerability in the following versions: QuFirewall 2.3.3 ( 2023/03/27 ) and later and later | CVSS3: 5.5 | 0% Низкий | около 1 года назад |
 | BDU:2024-11470 Уязвимость встроенного межсетевого экрана QuFirewall для защиты данных на устройствах NAS QNAP, связанная с непринятием мер по чистке данных на управляющем уровне, позволяющая нарушителю выполнять произвольные команды | CVSS3: 5.5 | 0% Низкий | больше 2 лет назад |
Уязвимостей на страницу