Lucene search
+L

CVE-2023-41282

🗓️ 02 Feb 2024 16:04:48Reported by qnapType 
cve
 cve
🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 42 Views

OS command injection vulnerability in QNAP OS versions, allows admin to execute commands via network

Related
Detection
Affected
Refs
Social
NVD
Node
OR
qnapqtsMatch5.1.0.2348build_20230325
qnapqtsMatch5.1.0.2399build_20230515
qnapqtsMatch5.1.0.2418build_20230603
qnapqtsMatch5.1.0.2444build_20230629
qnapqtsMatch5.1.0.2466build_20230721
qnapqtsMatch5.1.1.2491build_20230815
qnapqtsMatch5.1.2.2533build_20230926
qnapqtsMatch5.1.3.2578build_20231110
qnapqtsMatch5.1.4.2596build_20231128
qnapqtsMatch5.1.5.2645-
qnapquts_heroMatchh5.1.0.2409build_20230525
qnapquts_heroMatchh5.1.0.2424build_20230609
qnapquts_heroMatchh5.1.0.2453build_20230708
qnapquts_heroMatchh5.1.0.2466build_20230721
qnapquts_heroMatchh5.1.1.2488build_20230812
qnapquts_heroMatchh5.1.2.2534build_20230927
qnapquts_heroMatchh5.1.3.2578build_20231110
qnapquts_heroMatchh5.1.4.2596build_20231128
qnapquts_heroMatchh5.1.5.2647-
qnapqutscloudMatchc5.1.0.2498build_20230822
[
  {
    "defaultStatus": "unaffected",
    "product": "QTS",
    "vendor": "QNAP Systems Inc.",
    "versions": [
      {
        "lessThan": "5.1.4.2596 build 20231128",
        "status": "affected",
        "version": "5.1.x",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "QuTS hero",
    "vendor": "QNAP Systems Inc.",
    "versions": [
      {
        "lessThan": "h5.1.4.2596 build 20231128",
        "status": "affected",
        "version": "h5.1.x",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "QuTScloud",
    "vendor": "QNAP Systems Inc.",
    "versions": [
      {
        "lessThan": "c5.1.5.2651",
        "status": "affected",
        "version": "c5.x.x",
        "versionType": "custom"
      }
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

17 Jun 2026 06:21Current
7.4High risk
Vulners AI Score7.4
CVSS 3.15.5 - 7.2
EPSS0.00968
SSVC
42