Lucene search

[email protected]CVE-2023-32975

HistoryDec 08, 2023 - 4:15 p.m.

CVE-2023-32975

2023-12-0816:15:16

CWE-120

[email protected]

web.nvd.nist.gov

cve-2023-32975

qnap

buffer

copy

vulnerability

security

code execution

patch

nvd

7.2 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

23.1%

JSON

A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute code via a network.

We have already fixed the vulnerability in the following versions:
QTS 5.0.1.2514 build 20230906 and later
QTS 5.1.2.2533 build 20230926 and later
QuTS hero h5.0.1.2515 build 20230907 and later
QuTS hero h5.1.2.2534 build 20230927 and later

Affected configurations

NVD

Node

qnapqtsMatch5.1.0.2348build_20230325

qnapqtsMatch5.1.0.2399build_20230515

qnapqtsMatch5.1.0.2418build_20230603

qnapqtsMatch5.1.0.2444build_20230629

qnapqtsMatch5.1.0.2466build_20230721

qnapqtsMatch5.1.1.2491build_20230815

Node

qnapqtsMatch5.0.1.2034build_20220515

qnapqtsMatch5.0.1.2079build_20220629

qnapqtsMatch5.0.1.2131build_20220820

qnapqtsMatch5.0.1.2137build_20220826

qnapqtsMatch5.0.1.2145build_20220903

qnapqtsMatch5.0.1.2173build_20221001

qnapqtsMatch5.0.1.2194build_20221022

qnapqtsMatch5.0.1.2234build_20221201

qnapqtsMatch5.0.1.2248build_20221215

qnapqtsMatch5.0.1.2277build_20230112

qnapqtsMatch5.0.1.2346build_20230322

qnapqtsMatch5.0.1.2376build_20230421

qnapqtsMatch5.0.1.2425build_20230609

Node

qnapquts_heroMatchh5.1.0.2409build_20230525

qnapquts_heroMatchh5.1.0.2424build_20230609

qnapquts_heroMatchh5.1.0.2453build_20230708

qnapquts_heroMatchh5.1.0.2466build_20230721

qnapquts_heroMatchh5.1.1.2488build_20230812

Node

qnapquts_heroMatchh5.0.1.2045build_20220526

qnapquts_heroMatchh5.0.1.2192build_20221020

qnapquts_heroMatchh5.0.1.2248build_20221215

qnapquts_heroMatchh5.0.1.2269build_20230104

qnapquts_heroMatchh5.0.1.2277build_20230112

qnapquts_heroMatchh5.0.1.2348build_20230324

qnapquts_heroMatchh5.0.1.2376build_20230421

CPENameOperatorVersion
qnap:qtsqnap qtseq5.1.0.2348
qnap:qtsqnap qtseq5.1.0.2399
qnap:qtsqnap qtseq5.1.0.2418
qnap:qtsqnap qtseq5.1.0.2444
qnap:qtsqnap qtseq5.1.0.2466
qnap:qtsqnap qtseq5.1.1.2491

CPE	Name	Operator	Version
qnap:qts	qnap qts	eq	5.1.0.2348
qnap:qts	qnap qts	eq	5.1.0.2399
qnap:qts	qnap qts	eq	5.1.0.2418
qnap:qts	qnap qts	eq	5.1.0.2444
qnap:qts	qnap qts	eq	5.1.0.2466
qnap:qts	qnap qts	eq	5.1.1.2491

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "QTS",
    "vendor": "QNAP Systems Inc.",
    "versions": [
      {
        "lessThan": "5.0.1.2514 build 20230906",
        "status": "affected",
        "version": "5.0.x",
        "versionType": "custom"
      },
      {
        "lessThan": "5.1.2.2533 build 20230926",
        "status": "affected",
        "version": "5.1.x",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "QuTS hero",
    "vendor": "QNAP Systems Inc.",
    "versions": [
      {
        "lessThan": "h5.0.1.2515 build 20230907",
        "status": "affected",
        "version": "h5.0.x",
        "versionType": "custom"
      },
      {
        "lessThan": "h5.1.2.2534 build 20230927",
        "status": "affected",
        "version": "h5.1.x",
        "versionType": "custom"
      }
    ]
  }
]