Lucene search
+L

CVE-2023-50358

🗓️ 13 Feb 2024 02:45:22Reported by qnapType 
cve
 cve
🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 269 Views

CVE-2023-50358 OS command injection vulnerability reported in QNAP OS. Fixed in QTS 5.1.5.2645, QTS 4.5.4.2627, QTS 4.3.6.2665, QTS 4.3.4.2675, QTS 4.3.3.2644, QTS 4.2.6, QuTS hero h5.1.5.2647, QuTS hero h4.5.4.2626, QuTScloud c5.1.5.265

Related
Detection
Affected
Refs
Social
NVD
Node
OR
qnapqtsRange4.2.04.2.6
qnapqtsRange4.3.04.3.3.2644
qnapqtsRange4.3.44.3.4.2675
qnapqtsRange4.3.54.3.6.2665
qnapqtsRange4.5.14.5.4.2627
qnapqtsRange5.1.05.1.5.2645
qnapqtsMatch4.2.6-
qnapqtsMatch4.2.6build_20170517
qnapqtsMatch4.2.6build_20190322
qnapqtsMatch4.2.6build_20190730
qnapqtsMatch4.2.6build_20190921
qnapqtsMatch4.2.6build_20191107
qnapqtsMatch4.2.6build_20200109
qnapqtsMatch4.2.6build_20200421
qnapqtsMatch4.2.6build_20200611
qnapqtsMatch4.2.6build_20200821
qnapqtsMatch4.2.6build_20210327
qnapqtsMatch4.2.6build_20211215
qnapqtsMatch4.2.6build_20220304
qnapqtsMatch4.2.6build_20220623
qnapqtsMatch4.2.6build_20221028
qnapqtsMatch4.2.6build_20230621
qnapqtsMatch4.5.4.2627-
qnapqtsMatch5.1.5.2645-
qnapquts_heroRangeh4.5.0h4.5.4.2626
qnapquts_heroRangeh5.0.0h5.1.5.2647
qnapquts_heroMatchh4.5.4.2626-
qnapquts_heroMatchh5.1.5.2647-
qnapqutscloudRangec5.0.0.1919c5.1.5.2651
[
  {
    "defaultStatus": "unaffected",
    "product": "QTS",
    "vendor": "QNAP Systems Inc.",
    "versions": [
      {
        "lessThan": "5.1.5.2645 build 20240116",
        "status": "affected",
        "version": "5.x",
        "versionType": "custom"
      },
      {
        "lessThan": "4.5.4.2627 build 20231225",
        "status": "affected",
        "version": "4.5.x, 4.4.x",
        "versionType": "custom"
      },
      {
        "lessThan": "4.3.6.2665 build 20240131",
        "status": "affected",
        "version": "4.3.6, 4.3.5",
        "versionType": "custom"
      },
      {
        "lessThan": "4.3.4.2675 build 20240131",
        "status": "affected",
        "version": "4.3.4",
        "versionType": "custom"
      },
      {
        "lessThan": "4.3.3.2644 build 20240131",
        "status": "affected",
        "version": "4.3.x",
        "versionType": "custom"
      },
      {
        "lessThan": "4.2.6 build 20240131",
        "status": "affected",
        "version": "4.2.x",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "QuTS hero",
    "vendor": "QNAP Systems Inc.",
    "versions": [
      {
        "lessThan": "h5.1.5.2647 build 20240118",
        "status": "affected",
        "version": "h5.x",
        "versionType": "custom"
      },
      {
        "lessThan": "h4.5.4.2626 build 20231225",
        "status": "affected",
        "version": "h4.x",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "QuTScloud",
    "vendor": "QNAP Systems Inc.",
    "versions": [
      {
        "lessThan": "c5.1.5.2651",
        "status": "affected",
        "version": "c5.x",
        "versionType": "custom"
      }
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

17 Jun 2026 06:39Current
6.4Medium risk
Vulners AI Score6.4
CVSS 3.15.8
EPSS0.13523
SSVC
269