CVE-2023-41291

CVE-2023-41291 is a path traversal vulnerability in QuFirewall affecting versions prior to 2.4.1. The issue could allow authenticated administrators to read contents of unexpected files and expose sensitive data via a network. QuFirewall 2.4.1 (2024-02-01) and later fixes the flaw. The CVE detail...

QNAP Systems QuFirewall 路径遍历漏洞

QNAP Systems QuFirewall is a built-in firewall application for QNAP devices from China Weilian Technology QNAP Systems. A path traversal vulnerability exists in QNAP Systems QuFirewall version 2.4.1 and prior versions that could allow an authenticated administrator to read the contents of a file...

CVE-2023-41290: Improper Limitation of a Pathname to a Restricted Directory

A path traversal vulnerability has been reported to affect QuFirewall. If exploited, the vulnerability could allow authenticated administrators to read the contents of unexpected files and expose sensitive data via a network. We have already fixed the vulnerability in the following version:...

CVE-2023-41291: Improper Limitation of a Pathname to a Restricted Directory

A path traversal vulnerability has been reported to affect QuFirewall. If exploited, the vulnerability could allow authenticated administrators to read the contents of unexpected files and expose sensitive data via a network. We have already fixed the vulnerability in the following version:...

PT-2024-12936

Name of the Vulnerable Software and Affected Versions QuFirewall versions prior to 2.4.1 Description A path traversal vulnerability has been reported to affect QuFirewall. If exploited, the vulnerability could allow authenticated administrators to read the contents of unexpected files and expose...

QNAP Systems QuFirewall 路径遍历漏洞

QNAP Systems QuFirewall is a built-in firewall application for QNAP devices from China Weilian Technology QNAP Systems. A path traversal vulnerability exists in QNAP Systems QuFirewall 2.4.1 and prior versions, which originates from a vulnerability that allows an authenticated administrator to re...

PT-2024-12937

Name of the Vulnerable Software and Affected Versions QuFirewall versions prior to 2.4.1 Description A path traversal issue has been reported, allowing authenticated administrators to read the contents of unexpected files and expose sensitive data via a network. Recommendations For versions prior...

PT-2023-9811 · Qnap · Qufirewall

Name of the Vulnerable Software and Affected Versions: QuFirewall versions prior to 2.3.3 Description: A command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator...