QNAP QTS / QuTS hero Vulnerability in QTS and QuTS hero (QSA-23-59)

The version of QNAP QTS / QuTS hero installed on the remote host is affected by a vulnerability as referenced in the QSA-23-59 advisory. An insufficient entropy vulnerability has been reported to affect QNAP operating systems. If exploited, the vulnerability possibly allows remote users to predic...

QNAP QTS / QuTS hero Vulnerability in QTS and QuTS hero (QSA-23-60)

The version of QNAP QTS / QuTS hero installed on the remote host is affected by a vulnerability as referenced in the QSA-23-60 advisory. An inadequate encryption strength vulnerability has been reported to affect QNAP operating systems. If exploited, the vulnerability possibly allows local networ...

QNAP QTS Encryption Vulnerability (QSA-23-60)

QNAP QTS is prone to an inadequate encryption strength vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:qnap:qts";...

QNAP QTS Multiple Vulnerabilities (QSA-23-58, QSA-23-59)

QNAP QTS is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:qnap:qts"; ifdescription...

QNAP QTS / QuTS hero Information Disclosure (QSA-23-58)

The version of QNAP QTS / QuTS hero installed on the remote host is affected by an information disclosure vulnerability as referenced in the QSA-23-58 advisory. A cleartext transmission of sensitive information vulnerability has been reported to affect QNAP operating systems. If exploited, the...

PT-2023-8510 · Qnap · Qnap Qts +2

Name of the Vulnerable Software and Affected Versions: QNAP QTS versions prior to 5.1.4.2596 build 20231128 QNAP QuTS hero versions prior to h5.1.4.2596 build 20231128 QNAP QuTScloud versions prior to c5.1.5.2651 Description: The issue is related to an OS command injection vulnerability that coul...

CVE-2023-34973

An insufficient entropy vulnerability has been reported to affect QNAP operating systems. If exploited, the vulnerability possibly allows remote users to predict secret via unspecified vectors. We have already fixed the vulnerability in the following versions: QTS 5.0.1.2425 build 20230609 and...

CVE-2023-34973

An insufficient entropy vulnerability has been reported to affect QNAP operating systems. If exploited, the vulnerability possibly allows remote users to predict secret via unspecified vectors. We have already fixed the vulnerability in the following versions: QTS 5.0.1.2425 build 20230609 and...

CVE-2023-34972

A cleartext transmission of sensitive information vulnerability has been reported to affect QNAP operating systems. If exploited, the vulnerability possibly allows local network clients to read the contents of unexpected sensitive data via unspecified vectors. We have already fixed the...

CVE-2023-34971

An inadequate encryption strength vulnerability has been reported to affect QNAP operating systems. If exploited, the vulnerability possibly allows local network clients to decrypt the data using brute force attacks via unspecified vectors. We have already fixed the vulnerability in the following...

CVE-2023-34973 QTS, QuTS hero

An insufficient entropy vulnerability has been reported to affect QNAP operating systems. If exploited, the vulnerability possibly allows remote users to predict secret via unspecified vectors. We have already fixed the vulnerability in the following versions: QTS 5.0.1.2425 build 20230609 and...

CVE-2023-34973

CVE-2023-34973 affects QNAP QTS and QuTS hero (h5.x). The issue is described as an insufficient entropy vulnerability that could allow remote users to predict a secret via unspecified vectors. Fixed in QTS 5.0.1.2425 build 20230609 and later, QTS 5.1.0.2444 build 20230629 and later, and QuTS hero...

CVE-2023-34971 QTS, QuTS hero

An inadequate encryption strength vulnerability has been reported to affect QNAP operating systems. If exploited, the vulnerability possibly allows local network clients to decrypt the data using brute force attacks via unspecified vectors. We have already fixed the vulnerability in the following...

PT-2023-4584 · Qnap · Qnap Qts +1

Name of the Vulnerable Software and Affected Versions: QNAP QTS versions prior to 5.0.1.2425 build 20230609 QNAP QTS versions prior to 5.1.0.2444 build 20230629 QNAP QuTS hero h5.1.0 versions prior to 2424 build 20230609 Description: A cleartext transmission of sensitive information issue has bee...

PT-2023-4610 · Qnap · Qts +1

Name of the Vulnerable Software and Affected Versions: QTS versions prior to 5.0.1.2425 build 20230609 QTS versions prior to 5.1.0.2444 build 20230629 QTS versions prior to 4.5.4.2467 build 20230718 QuTS hero h5.1.0 versions prior to 2424 build 20230609 QuTS hero h4.5.4 versions prior to 2476 bui...

QNAP Systems QTS 和 QuTS hero 安全漏洞

QNAP Systems QTS and QNAP Systems QuTS hero are both products of China-based QNAP Systems.QNAP Systems QTS is an operating system for use with entry- to mid-level QNAP NAS.QNAP Systems QuTS hero is an operating system. A security vulnerability exists in QNAP QTS and QuTS hero, which stems from an...

QNAP QTS / QuTS hero DoS (QSA-23-09)

The version of QNAP QTS / QuTS hero installed on the remote host is affected by a denial of service vulnerability. A remote attacker can exploit this issue to cause uncontrolled resource consumption resulting in a DoS condition. Note that Nessus has not tested for this issue but has instead relie...

PT-2023-8505 · Qnap · Quts Hero +2

Name of the Vulnerable Software and Affected Versions: QTS versions prior to 5.1.3.2578 build 20231110 QuTS hero versions prior to h5.1.3.2578 build 20231110 QuTScloud versions prior to c5.1.5.2651 Description: The issue is related to improper authentication procedures in QNAP operating systems,...

QNAP QTS Buffer Overflow Vulnerability in Samba (QSA-23-03)

The version of QNAP QTS installed on the remote host is affected by a buffer overflow vulnerability as referenced in the QSA-23-03 advisory. PAC parsing in MIT Kerberos 5 aka krb5 before 1.19.4 and 1.20.x before 1.20.1 has integer overflows that may lead to remote code execution in KDC, kadmind, ...

QNAP QTS / QuTS hero Buffer Overflow Vulnerabilities in Samba (QSA-23-02)

The version of QNAP QTS / QuTS hero installed on the remote host is affected by multiple vulnerabilities as referenced in the QSA-23-02 advisory. - A heap-based buffer overflow vulnerability was found in Samba within the GSSAPI unwrapdes and unwrapdes3 routines of Heimdal. The DES and Triple-DES...