Qnap QTS OS Command Injection (CVE-2023-34979)

An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute commands via a network. We have already fixed the vulnerability in the following versions: QTS 4.5.4.2790...

QNAP QTS Multiple Vulnerabilities (QSA-24-32)

QNAP QTS is prone to multiple OS command injection vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:qnap:qts";...

CVE-2023-34979

CVE-2023-34979 affects QNAP QTS and QuTS hero OS, where an OS command injection vulnerability allows authenticated administrators to execute remote commands over the network. Root cause details indicate a vulnerable OS command execution path in affected QTS/QuTS components. Fixed versions are QTS...

CVE-2023-34979 QTS, QuTS hero

An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute commands via a network. We have already fixed the vulnerability in the following versions: QTS 4.5.4.2790...