CVE-2023-34975

CVE-2023-34975 is an OS command injection vulnerability reported to affect several QNAP operating systems. The authenticated attacker capability described is to execute commands over the network. Affected products include QNAP QTS/QuTS variants; specifically, fixes are in QuTS hero h4.5.4.2626 bu...

CVE-2023-34975 QTS, QuTS hero, QuTScloud

An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute commands via a network. QuTScloud is not affected. We have already fixed the vulnerability in the following...