Lucene search
K

CVE-2023-50358

🗓️ 13 Feb 2024 02:45:22Reported by qnapType 
cve
 cve
🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 253 Views

CVE-2023-50358 OS command injection vulnerability reported in QNAP OS. Fixed in QTS 5.1.5.2645, QTS 4.5.4.2627, QTS 4.3.6.2665, QTS 4.3.4.2675, QTS 4.3.3.2644, QTS 4.2.6, QuTS hero h5.1.5.2647, QuTS hero h4.5.4.2626, QuTScloud c5.1.5.265

Related
Detection
Affected
Refs
Social
NVD
Node
qnapqtsRange4.2.04.2.6
OR
qnapqtsRange4.3.04.3.3.2644
OR
qnapqtsRange4.3.44.3.4.2675
OR
qnapqtsRange4.3.54.3.6.2665
OR
qnapqtsRange4.5.14.5.4.2627
OR
qnapqtsRange5.1.05.1.5.2645
OR
qnapqtsMatch4.2.6-
OR
qnapqtsMatch4.2.6build_20170517
OR
qnapqtsMatch4.2.6build_20190322
OR
qnapqtsMatch4.2.6build_20190730
OR
qnapqtsMatch4.2.6build_20190921
OR
qnapqtsMatch4.2.6build_20191107
OR
qnapqtsMatch4.2.6build_20200109
OR
qnapqtsMatch4.2.6build_20200421
OR
qnapqtsMatch4.2.6build_20200611
OR
qnapqtsMatch4.2.6build_20200821
OR
qnapqtsMatch4.2.6build_20210327
OR
qnapqtsMatch4.2.6build_20211215
OR
qnapqtsMatch4.2.6build_20220304
OR
qnapqtsMatch4.2.6build_20220623
OR
qnapqtsMatch4.2.6build_20221028
OR
qnapqtsMatch4.2.6build_20230621
OR
qnapqtsMatch4.5.4.2627-
OR
qnapqtsMatch5.1.5.2645-
OR
qnapquts_heroRangeh4.5.0h4.5.4.2626
OR
qnapquts_heroRangeh5.0.0h5.1.5.2647
OR
qnapquts_heroMatchh4.5.4.2626-
OR
qnapquts_heroMatchh5.1.5.2647-
OR
qnapqutscloudRangec5.0.0.1919c5.1.5.2651
[
  {
    "defaultStatus": "unaffected",
    "product": "QTS",
    "vendor": "QNAP Systems Inc.",
    "versions": [
      {
        "lessThan": "5.1.5.2645 build 20240116",
        "status": "affected",
        "version": "5.x",
        "versionType": "custom"
      },
      {
        "lessThan": "4.5.4.2627 build 20231225",
        "status": "affected",
        "version": "4.5.x, 4.4.x",
        "versionType": "custom"
      },
      {
        "lessThan": "4.3.6.2665 build 20240131",
        "status": "affected",
        "version": "4.3.6, 4.3.5",
        "versionType": "custom"
      },
      {
        "lessThan": "4.3.4.2675 build 20240131",
        "status": "affected",
        "version": "4.3.4",
        "versionType": "custom"
      },
      {
        "lessThan": "4.3.3.2644 build 20240131",
        "status": "affected",
        "version": "4.3.x",
        "versionType": "custom"
      },
      {
        "lessThan": "4.2.6 build 20240131",
        "status": "affected",
        "version": "4.2.x",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "QuTS hero",
    "vendor": "QNAP Systems Inc.",
    "versions": [
      {
        "lessThan": "h5.1.5.2647 build 20240118",
        "status": "affected",
        "version": "h5.x",
        "versionType": "custom"
      },
      {
        "lessThan": "h4.5.4.2626 build 20231225",
        "status": "affected",
        "version": "h4.x",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "QuTScloud",
    "vendor": "QNAP Systems Inc.",
    "versions": [
      {
        "lessThan": "c5.1.5.2651",
        "status": "affected",
        "version": "c5.x",
        "versionType": "custom"
      }
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

10 Dec 2025 21:17Current
6.4Medium risk
Vulners AI Score6.4
CVSS 3.15.8
EPSS0.01843
SSVC
253