Lucene search
+L

CVE-2023-23369

🗓️ 03 Nov 2023 16:34:40Reported by qnapType 
cve
 cve
🔗 web.nvd.nist.gov👁 82 Views

OS command injection vulnerability affecting QNAP OS versions. Allows network-based command execution. Versions with fixed vulnerability listed

Related
Detection
Affected
Refs
NVD
Node
qnapqtsMatch5.1.0.2348build_20230325
Node
OR
qnapqtsMatch4.3.6.0895build_20190328
qnapqtsMatch4.3.6.0907build_20190409
qnapqtsMatch4.3.6.0923build_20190425
qnapqtsMatch4.3.6.0944build_20190516
qnapqtsMatch4.3.6.0959build_20190531
qnapqtsMatch4.3.6.0979build_20190620
qnapqtsMatch4.3.6.0993build_20190704
qnapqtsMatch4.3.6.1013build_20190724
qnapqtsMatch4.3.6.1033build_20190813
qnapqtsMatch4.3.6.1070build_20190919
qnapqtsMatch4.3.6.1154build_20191212
qnapqtsMatch4.3.6.1218build_20200214
qnapqtsMatch4.3.6.1263build_20200330
qnapqtsMatch4.3.6.1286build_20200422
qnapqtsMatch4.3.6.1333build_20200608
qnapqtsMatch4.3.6.1411build_20200825
qnapqtsMatch4.3.6.1446build_20200929
qnapqtsMatch4.3.6.1620build_20210322
qnapqtsMatch4.3.6.1663build_20210504
qnapqtsMatch4.3.6.1711build_20210621
qnapqtsMatch4.3.6.1750build_20210730
qnapqtsMatch4.3.6.1831build_20211019
qnapqtsMatch4.3.6.1907build_20220103
qnapqtsMatch4.3.6.1965build_20220302
qnapqtsMatch4.3.6.2050build_20220526
qnapqtsMatch4.3.6.2232build_20221124
Node
OR
qnapqtsMatch4.3.4.0899build_20190322
qnapqtsMatch4.3.4.1029build_20190730
qnapqtsMatch4.3.4.1082build_20190921
qnapqtsMatch4.3.4.1190build_20200107
qnapqtsMatch4.3.4.1282build_20200408
qnapqtsMatch4.3.4.1368build_20200703
qnapqtsMatch4.3.4.1417build_20200821
qnapqtsMatch4.3.4.1463build_20201006
qnapqtsMatch4.3.4.1632build_20210324
qnapqtsMatch4.3.4.1652build_20210413
qnapqtsMatch4.3.4.1976build_20220303
qnapqtsMatch4.3.4.2107build_20220712
qnapqtsMatch4.3.4.2242build_20221124
Node
OR
qnapqtsMatch4.3.3.0174build_20170503
qnapqtsMatch4.3.3.0868build_20190322
qnapqtsMatch4.3.3.0998build_20190730
qnapqtsMatch4.3.3.1051build_20190921
qnapqtsMatch4.3.3.1098build_20191107
qnapqtsMatch4.3.3.1161build_20200109
qnapqtsMatch4.3.3.1252build_20200409
qnapqtsMatch4.3.3.1315build_20200611
qnapqtsMatch4.3.3.1386build_20200821
qnapqtsMatch4.3.3.1432build_20201006
qnapqtsMatch4.3.3.1624build_20210416
qnapqtsMatch4.3.3.1677build_20210608
qnapqtsMatch4.3.3.1693build_20210624
qnapqtsMatch4.3.3.1799build_20211008
qnapqtsMatch4.3.3.1864build_20211212
qnapqtsMatch4.3.3.1945build_20220303
qnapqtsMatch4.3.3.2057build_20220623
qnapqtsMatch4.3.3.2211build_20221124
Node
OR
qnapqtsMatch4.2.6build_20170517
qnapqtsMatch4.2.6build_20190322
qnapqtsMatch4.2.6build_20190730
qnapqtsMatch4.2.6build_20190921
qnapqtsMatch4.2.6build_20191107
qnapqtsMatch4.2.6build_20200109
qnapqtsMatch4.2.6build_20200421
qnapqtsMatch4.2.6build_20200611
qnapqtsMatch4.2.6build_20200821
qnapqtsMatch4.2.6build_20210327
qnapqtsMatch4.2.6build_20211215
qnapqtsMatch4.2.6build_20220304
qnapqtsMatch4.2.6build_20220623
qnapqtsMatch4.2.6build_20221028
[
  {
    "defaultStatus": "unaffected",
    "product": "Multimedia Console",
    "vendor": "QNAP Systems Inc.",
    "versions": [
      {
        "lessThan": "2.1.2 ( 2023/05/04 )",
        "status": "affected",
        "version": "2.1.x",
        "versionType": "custom"
      },
      {
        "lessThan": "1.4.8 ( 2023/05/05 )",
        "status": "affected",
        "version": "1.4.x",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "QTS",
    "vendor": "QNAP Systems Inc.",
    "versions": [
      {
        "lessThan": "5.1.0.2399 build 20230515",
        "status": "affected",
        "version": "5.1.x",
        "versionType": "custom"
      },
      {
        "lessThan": "4.3.6.2441 build 20230621",
        "status": "affected",
        "version": "4.3.6",
        "versionType": "custom"
      },
      {
        "lessThan": "4.3.4.2451 build 20230621",
        "status": "affected",
        "version": "4.3.4",
        "versionType": "custom"
      },
      {
        "lessThan": "4.3.3.2420 build 20230621",
        "status": "affected",
        "version": "4.3.3",
        "versionType": "custom"
      },
      {
        "lessThan": "4.2.6 build 20230621",
        "status": "affected",
        "version": "4.2.x",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Media Streaming add-on",
    "vendor": "QNAP Systems Inc.",
    "versions": [
      {
        "lessThan": "500.1.1.2 ( 2023/06/12 )",
        "status": "affected",
        "version": "500.1.x",
        "versionType": "custom"
      },
      {
        "lessThan": "500.0.0.11 ( 2023/06/16 )",
        "status": "affected",
        "version": "500.0.x",
        "versionType": "custom"
      }
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

17 Jun 2026 05:36Current
9.6High risk
Vulners AI Score9.6
CVSS 3.19 - 9.8
EPSS0.14519
SSVC
82