Lucene search

[email protected]CVE-2023-47567

HistoryFeb 02, 2024 - 4:15 p.m.

CVE-2023-47567

2024-02-0216:15:52

CWE-78

[email protected]

web.nvd.nist.gov

qnap

os command injection

vulnerability

qts

quts hero

qutscloud

security patch

nvd

cve-2023-47567

7.2 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

8 High

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.4%

JSON

An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute commands via a network.

We have already fixed the vulnerability in the following versions:
QTS 5.1.5.2645 build 20240116 and later
QTS 4.5.4.2627 build 20231225 and later
QuTS hero h5.1.5.2647 build 20240118 and later
QuTS hero h4.5.4.2626 build 20231225 and later
QuTScloud c5.1.5.2651 and later

Affected configurations

NVD

Node

qnapqtsMatch4.5.4.1715build_20210630

qnapqtsMatch4.5.4.1723build_20210708

qnapqtsMatch4.5.4.1741build_20210726

qnapqtsMatch4.5.4.1787build_20210910

qnapqtsMatch4.5.4.1800build_20210923

qnapqtsMatch4.5.4.1892build_20211223

qnapqtsMatch4.5.4.1931build_20220128

qnapqtsMatch4.5.4.2012build_20220419

qnapqtsMatch4.5.4.2117build_20220802

qnapqtsMatch4.5.4.2280build_20230112

qnapqtsMatch4.5.4.2374build_20230416

qnapqtsMatch4.5.4.2627-

qnapqtsMatch5.1.0.2348build_20230325

qnapqtsMatch5.1.0.2399build_20230515

qnapqtsMatch5.1.0.2418build_20230603

qnapqtsMatch5.1.0.2444build_20230629

qnapqtsMatch5.1.0.2466build_20230721

qnapqtsMatch5.1.1.2491build_20230815

qnapqtsMatch5.1.2.2533build_20230926

qnapqtsMatch5.1.3.2578build_20231110

qnapqtsMatch5.1.4.2596build_20231128

qnapqtsMatch5.1.5.2645-

qnapquts_heroMatchh4.5.4.1771build_20210825

qnapquts_heroMatchh4.5.4.1800build_20210923

qnapquts_heroMatchh4.5.4.1813build_20211006

qnapquts_heroMatchh4.5.4.1848build_20211109

qnapquts_heroMatchh4.5.4.1892build_20211223

qnapquts_heroMatchh4.5.4.1951build_20220218

qnapquts_heroMatchh4.5.4.1971build_20220310

qnapquts_heroMatchh4.5.4.1991build_20220330

qnapquts_heroMatchh4.5.4.2052build_20220530

qnapquts_heroMatchh4.5.4.2138build_20220824

qnapquts_heroMatchh4.5.4.2217build_20221111

qnapquts_heroMatchh4.5.4.2272build_20230105

qnapquts_heroMatchh4.5.4.2374build_20230417

qnapquts_heroMatchh4.5.4.2476build_20230728

qnapquts_heroMatchh4.5.4.2626-

qnapquts_heroMatchh5.1.0.2409build_20230525

qnapquts_heroMatchh5.1.0.2424build_20230609

qnapquts_heroMatchh5.1.0.2453build_20230708

qnapquts_heroMatchh5.1.0.2466build_20230721

qnapquts_heroMatchh5.1.1.2488build_20230812

qnapquts_heroMatchh5.1.2.2534build_20230927

qnapquts_heroMatchh5.1.3.2578build_20231110

qnapquts_heroMatchh5.1.4.2596build_20231128

qnapquts_heroMatchh5.1.5.2647-

qnapqutscloudMatchc5.1.0.2498build_20230822

CPENameOperatorVersion
qnap:qtsqnap qtseq4.5.4.1715
qnap:qtsqnap qtseq4.5.4.1723
qnap:qtsqnap qtseq4.5.4.1741
qnap:qtsqnap qtseq4.5.4.1787
qnap:qtsqnap qtseq4.5.4.1800
qnap:qtsqnap qtseq4.5.4.1892
qnap:qtsqnap qtseq4.5.4.1931
qnap:qtsqnap qtseq4.5.4.2012
qnap:qtsqnap qtseq4.5.4.2117
qnap:qtsqnap qtseq4.5.4.2280

CPE	Name	Operator	Version
qnap:qts	qnap qts	eq	4.5.4.1715
qnap:qts	qnap qts	eq	4.5.4.1723
qnap:qts	qnap qts	eq	4.5.4.1741
qnap:qts	qnap qts	eq	4.5.4.1787
qnap:qts	qnap qts	eq	4.5.4.1800
qnap:qts	qnap qts	eq	4.5.4.1892
qnap:qts	qnap qts	eq	4.5.4.1931
qnap:qts	qnap qts	eq	4.5.4.2012
qnap:qts	qnap qts	eq	4.5.4.2117
qnap:qts	qnap qts	eq	4.5.4.2280

Rows per page:

1-10 of 471

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "QTS",
    "vendor": "QNAP Systems Inc.",
    "versions": [
      {
        "lessThan": "5.1.5.2645 build 20240116",
        "status": "affected",
        "version": "5.1.x",
        "versionType": "custom"
      },
      {
        "lessThan": "4.5.4.2627 build 20231225",
        "status": "affected",
        "version": "4.5.x",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "QuTS hero",
    "vendor": "QNAP Systems Inc.",
    "versions": [
      {
        "lessThan": "h5.1.5.2647 build 20240118",
        "status": "affected",
        "version": "h5.1.x",
        "versionType": "custom"
      },
      {
        "lessThan": "h4.5.4.2626 build 20231225",
        "status": "affected",
        "version": "h4.5.x",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "QuTScloud",
    "vendor": "QNAP Systems Inc.",
    "versions": [
      {
        "lessThan": "c5.1.5.2651",
        "status": "affected",
        "version": "c5.x.x",
        "versionType": "custom"
      }
    ]
  }
]