PT-2023-7998 · Qnap · Qts +2

Name of the Vulnerable Software and Affected Versions: QTS versions prior to 5.0.1.2376 build 20230421 QTS versions prior to 4.5.4.2374 build 20230416 QuTS hero versions prior to h5.0.1.2376 build 20230421 QuTS hero versions prior to h4.5.4.2374 build 20230417 QuTScloud versions prior to...

QNAP QTS Command Injection Vulnerability (QSA-23-18)

QNAP QTS is prone to a command injection vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:qnap:qts"; ifdescription...

QNAP QuTS hero Multiple Vulnerabilities (QSA-23-19, QSA-23-21)

QNAP QuTS hero is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:qnap:qutshero"; ifdescriptio...

QNAP QuTS hero Command Injection Vulnerability (QSA-23-18)

QNAP QTS is prone to a command injection vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:qnap:qutshero";...

QNAP QTS Multiple Vulnerabilities (QSA-23-19, QSA-23-21)

QNAP QTS is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:qnap:qts"; ifdescription...

Vulnerabilities fixed in QNAP QTS and QuTS Hero

QNAP has fixed vulnerabilities in QTS and QuTS Hero. A authenticated malicious party can exploit the vulnerabilities to cause a denial-of-service, or through command-injection execute arbitrary code on the system. QNAP has released updates to fix the vulnerabilities in QTS and QuTS Hero v...

QNAP Systems Qvr Pro Log Information Disclosure Vulnerability

QNAP Systems Qvr Pro is an Ip video surveillance system from QNAP Systems. It is used to manage Ip cameras, monitor live view and playback previous recordings using a mobile device. A security vulnerability exists in QNAP Systems Qvr Pro versions prior to 2.3.0.0420, which originates from inserti...

PT-2023-9810

Name of the Vulnerable Software and Affected Versions QuLog Center versions prior to 1.3.1.645 QuLog Center versions prior to 1.4.1.691 QuLog Center versions prior to 1.5.0.738 Description A cross-site scripting XSS vulnerability has been reported to affect several QNAP operating system versions...

PT-2023-9811 · Qnap · Qufirewall

Name of the Vulnerable Software and Affected Versions: QuFirewall versions prior to 2.3.3 Description: A command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator...

The vulnerability of the QTS operating system’s network storage solutions on QNAP devices allows a perpetrator to gain unauthorized access to confidential data.

The vulnerability of the QTS operating system’s network storage solutions from QNAP is related to insufficient encryption strength. Exploiting this vulnerability could allow an attacker to gain unauthorized access to confidential data remotely...

QNAP QTS / QuTS hero Vulnerability in QTS and QuTS hero (QSA-23-59)

The version of QNAP QTS / QuTS hero installed on the remote host is affected by a vulnerability as referenced in the QSA-23-59 advisory. An insufficient entropy vulnerability has been reported to affect QNAP operating systems. If exploited, the vulnerability possibly allows remote users to predic...

QNAP QTS / QuTS hero Vulnerability in QTS and QuTS hero (QSA-23-60)

The version of QNAP QTS / QuTS hero installed on the remote host is affected by a vulnerability as referenced in the QSA-23-60 advisory. An inadequate encryption strength vulnerability has been reported to affect QNAP operating systems. If exploited, the vulnerability possibly allows local networ...

QNAP QuTS hero Multiple Vulnerabilities (QSA-23-58, QSA-23-59)

QNAP QuTS hero is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:qnap:qutshero"; ifdescriptio...

QNAP QTS Multiple Vulnerabilities (QSA-23-58, QSA-23-59)

QNAP QTS is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:qnap:qts"; ifdescription...

QNAP QTS Encryption Vulnerability (QSA-23-60)

QNAP QTS is prone to an inadequate encryption strength vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:qnap:qts";...

QNAP QuTS hero Encryption Vulnerability (QSA-23-60)

QNAP QuTS hero is prone to an inadequate encryption strength vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

QNAP QTS / QuTS hero Information Disclosure (QSA-23-58)

The version of QNAP QTS / QuTS hero installed on the remote host is affected by an information disclosure vulnerability as referenced in the QSA-23-58 advisory. A cleartext transmission of sensitive information vulnerability has been reported to affect QNAP operating systems. If exploited, the...

PT-2023-8513 · Qnap · Quts Hero +2

Name of the Vulnerable Software and Affected Versions: QTS versions prior to 5.1.2.2533 build 20230926 QuTS hero versions prior to h5.1.2.2534 build 20230927 QuTScloud versions prior to c5.1.5.2651 Description: A buffer copy without checking the size of input vulnerability has been reported to...

PT-2023-8500 · Qnap · Qts +2

Name of the Vulnerable Software and Affected Versions: QTS versions prior to 5.1.2.2533 build 20230926 QuTS hero versions prior to h5.1.2.2534 build 20230927 QuTScloud versions prior to c5.1.5.2651 Description: A buffer copy without checking size of input vulnerability has been reported to affect...

PT-2023-8515 · Qnap · Quts Hero +2

Name of the Vulnerable Software and Affected Versions: QTS versions prior to 5.1.2.2533 build 20230926 QuTS hero versions prior to h5.1.2.2534 build 20230927 QuTScloud versions prior to c5.1.5.2651 Description: A heap-based buffer overflow vulnerability has been reported to affect several QNAP...