Логотип exploitDog
bind:CVE-2023-23367
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2023-23367

Количество 3

Количество 3

nvd логотип

CVE-2023-23367

около 2 лет назад

An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute commands via a network. We have already fixed the vulnerability in the following versions: QTS 5.0.1.2376 build 20230421 and later QuTS hero h5.0.1.2376 build 20230421 and later QuTScloud c5.1.0.2498 and later

CVSS3: 4.7
EPSS: Низкий
github логотип

GHSA-p49w-7qqv-rf9v

около 2 лет назад

An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute commands via a network. We have already fixed the vulnerability in the following versions: QTS 5.0.1.2376 build 20230421 and later QuTS hero h5.0.1.2376 build 20230421 and later QuTScloud c5.1.0.2498 and later

CVSS3: 4.7
EPSS: Низкий
fstec логотип

BDU:2024-02158

почти 2 года назад

Уязвимость операционных систем QTS, QuTS hero, QuTScloud сетевых устройств Qnap, связанная с непринятием мер по нейтрализации специальных элементов, используемых в команде операционной системы, позволяющая нарушителю выполнять произвольные команды

CVSS3: 7.2
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2023-23367

An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute commands via a network. We have already fixed the vulnerability in the following versions: QTS 5.0.1.2376 build 20230421 and later QuTS hero h5.0.1.2376 build 20230421 and later QuTScloud c5.1.0.2498 and later

CVSS3: 4.7
0%
Низкий
около 2 лет назад
github логотип
GHSA-p49w-7qqv-rf9v

An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute commands via a network. We have already fixed the vulnerability in the following versions: QTS 5.0.1.2376 build 20230421 and later QuTS hero h5.0.1.2376 build 20230421 and later QuTScloud c5.1.0.2498 and later

CVSS3: 4.7
0%
Низкий
около 2 лет назад
fstec логотип
BDU:2024-02158

Уязвимость операционных систем QTS, QuTS hero, QuTScloud сетевых устройств Qnap, связанная с непринятием мер по нейтрализации специальных элементов, используемых в команде операционной системы, позволяющая нарушителю выполнять произвольные команды

CVSS3: 7.2
0%
Низкий
почти 2 года назад

Уязвимостей на страницу