QNAP NAS Remote Code Execution Vulnerability
Release Date: 6 Nov 2023
RISK: Medium Risk
TYPE: Servers - Other Servers
A vulnerability was identified in QNAP NAS. A remote attacker can exploit this vulnerability to trigger remote code execution on the targeted system.
Impact
- Remote Code Execution
System / Technologies affected
- QTS 4.2.x
- QTS 4.3.3
- QTS 4.3.4
- QTS 4.3.6
- QTS 4.5.x
- QTS 5.0.x
- QTS 5.1.x
- QuTS hero h4.5.x
- QuTS hero h5.0.x
- QuTScloud c5.0.x
Solutions
Before installation of the software, please visit the vendor web-site for more details.
- Apply fixes issued by the vendor:
https://www.qnap.com/en/security-advisory/QSA-23-31
https://www.qnap.com/en/security-advisory/QSA-23-35
沒有留言:
發佈留言