An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to execute commands via a network.
We have already fixed the vulnerability in the following versions:
QTS 5.1.5.2645 build 20240116 and later
QuTS hero h5.1.5.2647 build 20240118 and later
QuTScloud c5.1.5.2651 and later
References
Configurations
No configuration.
History
21 Nov 2024, 08:29
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://www.qnap.com/en/security-advisory/qsa-23-57 - | |
| References | () https://www.rapid7.com/blog/post/2024/02/13/cve-2023-47218-qnap-qts-and-quts-hero-unauthenticated-command-injection-fixed/ - |
15 Feb 2024, 06:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
13 Feb 2024, 03:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-02-13 03:15
Updated : 2024-11-21 08:29
NVD link : CVE-2023-47218
Mitre link : CVE-2023-47218
CVE.ORG link : CVE-2023-47218
JSON object : View
Products Affected
No product.