Qnap QTS OS Command Injection (CVE-2023-39300)

An OS command injection vulnerability has been reported to affect legacy QTS. If exploited, the vulnerability could allow authenticated administrators to execute commands via a network. We have already fixed the vulnerability in the following versions: QTS 4.3.6.2805 build 20240619 and later QTS...

CVE-2023-39300

The CVE-2023-39300 entry concerns QNAP QTS OS command injection in legacy QTS. Affected are QTS versions prior to 4.3.6.2805 (build 20240619), prior to 4.3.4.2814 (build 20240618), prior to 4.3.3.2784 (build 20240619), and prior to 4.2.6 (build 20240618). The vulnerability stems from insufficient...

QNAP QTS OS Command Injection Vulnerability (QSA-24-26)

QNAP QTS is prone to an OS command injection vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:qnap:qts";...