csirt@kutim:~/threat-intel/cve/CVE-2023-23369

Katalog CVE

CVSS 9.8 · Critical EPSS 14,5%

Kerentanan Improper Neutralization of Special Elements used in a Command ('Command Injection') pada qnap qts. Skor CVSS 3.1 9.8 (Critical) menurut NVD.

Deskripsi (NVD)

An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to execute commands via a network. We have already fixed the vulnerability in the following versions: Multimedia Console 2.1.2 ( 2023/05/04 ) and later Multimedia Console 1.4.8 ( 2023/05/05 ) and later QTS 5.1.0.2399 build 20230515 and later QTS 4.3.6.2441 build 20230621 and later QTS 4.3.4.2451 build 20230621 and later QTS 4.3.3.2420 build 20230621 and later QTS 4.2.6 build 20230621 and later Media Streaming add-on 500.1.1.2 ( 2023/06/12 ) and later Media Streaming add-on 500.0.0.11 ( 2023/06/16 ) and later

Rincian

Terbit di NVD
3 November 2023
Terakhir diubah
17 Juni 2026
Status NVD
Modified
CVSS 3.1
9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection')
CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
EPSS (30 hari)
14,5% peluang dieksploitasi; lebih tinggi dari 96,5% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
qnap qts Versi 5.1.0.2348 build_20230325
qnap qts Versi 4.3.6.0895 build_20190328
qnap qts Versi 4.3.6.0907 build_20190409
qnap qts Versi 4.3.6.0923 build_20190425
qnap qts Versi 4.3.6.0944 build_20190516
qnap qts Versi 4.3.6.0959 build_20190531
qnap qts Versi 4.3.6.0979 build_20190620
qnap qts Versi 4.3.6.0993 build_20190704
qnap qts Versi 4.3.6.1013 build_20190724
qnap qts Versi 4.3.6.1033 build_20190813
qnap qts Versi 4.3.6.1070 build_20190919
qnap qts Versi 4.3.6.1154 build_20191212
qnap qts Versi 4.3.6.1218 build_20200214
qnap qts Versi 4.3.6.1263 build_20200330
qnap qts Versi 4.3.6.1286 build_20200422
qnap qts Versi 4.3.6.1333 build_20200608
qnap qts Versi 4.3.6.1411 build_20200825
qnap qts Versi 4.3.6.1446 build_20200929
qnap qts Versi 4.3.6.1620 build_20210322
qnap qts Versi 4.3.6.1663 build_20210504
qnap qts Versi 4.3.6.1711 build_20210621
qnap qts Versi 4.3.6.1750 build_20210730
qnap qts Versi 4.3.6.1831 build_20211019
qnap qts Versi 4.3.6.1907 build_20220103
qnap qts Versi 4.3.6.1965 build_20220302
qnap qts Versi 4.3.6.2050 build_20220526
qnap qts Versi 4.3.6.2232 build_20221124
qnap qts Versi 4.3.4.0899 build_20190322
qnap qts Versi 4.3.4.1029 build_20190730
qnap qts Versi 4.3.4.1082 build_20190921
qnap qts Versi 4.3.4.1190 build_20200107
qnap qts Versi 4.3.4.1282 build_20200408
qnap qts Versi 4.3.4.1368 build_20200703
qnap qts Versi 4.3.4.1417 build_20200821
qnap qts Versi 4.3.4.1463 build_20201006
qnap qts Versi 4.3.4.1632 build_20210324
qnap qts Versi 4.3.4.1652 build_20210413
qnap qts Versi 4.3.4.1976 build_20220303
qnap qts Versi 4.3.4.2107 build_20220712
qnap qts Versi 4.3.4.2242 build_20221124
qnap qts Versi 4.3.3.0174 build_20170503
qnap qts Versi 4.3.3.0868 build_20190322
qnap qts Versi 4.3.3.0998 build_20190730
qnap qts Versi 4.3.3.1051 build_20190921
qnap qts Versi 4.3.3.1098 build_20191107
qnap qts Versi 4.3.3.1161 build_20200109
qnap qts Versi 4.3.3.1252 build_20200409
qnap qts Versi 4.3.3.1315 build_20200611
qnap qts Versi 4.3.3.1386 build_20200821
qnap qts Versi 4.3.3.1432 build_20201006
qnap qts Versi 4.3.3.1624 build_20210416
qnap qts Versi 4.3.3.1677 build_20210608
qnap qts Versi 4.3.3.1693 build_20210624
qnap qts Versi 4.3.3.1799 build_20211008
qnap qts Versi 4.3.3.1864 build_20211212
qnap qts Versi 4.3.3.1945 build_20220303
qnap qts Versi 4.3.3.2057 build_20220623
qnap qts Versi 4.3.3.2211 build_20221124
qnap qts Versi 4.2.6 build_20170517
qnap qts Versi 4.2.6 build_20190322

> Data dari konfigurasi CPE di NVD. Ditampilkan 60 dari 91 konfigurasi; daftar lengkap ada di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.