CVE-2023-23356

CVE-2023-23356 is a command-injection vulnerability in QNAP QuFirewall. The issue allows remote attackers who have gained administrator access to execute arbitrary commands via the QuFirewall module on affected QNAP OS versions. Affected/impacted component: QuFirewall (QNAP devices). Root cause d...

CVE-2023-41291

CVE-2023-41291 is a path traversal vulnerability in QuFirewall affecting versions prior to 2.4.1. The issue could allow authenticated administrators to read contents of unexpected files and expose sensitive data via a network. QuFirewall 2.4.1 (2024-02-01) and later fixes the flaw. The CVE detail...

CVE-2023-41290

CVE-2023-41290 is a path-traversal vulnerability in QNAP’s QuFirewall. It affects versions prior to 2.4.1 and, if exploitable, could allow an authenticated administrator to read contents of unexpected files and expose sensitive data over the network. A fix is available in QuFirewall 2.4.1 (2024-0...