CVE-2023-32975

qnap qts, qnap quts hero

TLP:CLEAR

csirt@kutim:~/threat-intel/cve/CVE-2023-32975

Katalog CVE

CVSS 7.2 · High EPSS 0,87%

Kerentanan Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') pada qnap qts, qnap quts hero. Skor CVSS 3.1 7.2 (High) menurut NVD.

Deskripsi (NVD)

A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute code via a network. We have already fixed the vulnerability in the following versions: QTS 5.0.1.2514 build 20230906 and later QTS 5.1.2.2533 build 20230926 and later QuTS hero h5.0.1.2515 build 20230907 and later QuTS hero h5.1.2.2534 build 20230927 and later

Rincian

Terbit di NVD
8 Desember 2023
Terakhir diubah
17 Juni 2026
Status NVD
Modified
CVSS 3.1
7.2 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
EPSS (30 hari)
0,87% peluang dieksploitasi; lebih tinggi dari 57,6% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
qnap qts Versi 5.1.0.2348 build_20230325
qnap qts Versi 5.1.0.2399 build_20230515
qnap qts Versi 5.1.0.2418 build_20230603
qnap qts Versi 5.1.0.2444 build_20230629
qnap qts Versi 5.1.0.2466 build_20230721
qnap qts Versi 5.1.1.2491 build_20230815
qnap qts Versi 5.0.1.2034 build_20220515
qnap qts Versi 5.0.1.2079 build_20220629
qnap qts Versi 5.0.1.2131 build_20220820
qnap qts Versi 5.0.1.2137 build_20220826
qnap qts Versi 5.0.1.2145 build_20220903
qnap qts Versi 5.0.1.2173 build_20221001
qnap qts Versi 5.0.1.2194 build_20221022
qnap qts Versi 5.0.1.2234 build_20221201
qnap qts Versi 5.0.1.2248 build_20221215
qnap qts Versi 5.0.1.2277 build_20230112
qnap qts Versi 5.0.1.2346 build_20230322
qnap qts Versi 5.0.1.2376 build_20230421
qnap qts Versi 5.0.1.2425 build_20230609
qnap quts hero Versi h5.1.0.2409 build_20230525
qnap quts hero Versi h5.1.0.2424 build_20230609
qnap quts hero Versi h5.1.0.2453 build_20230708
qnap quts hero Versi h5.1.0.2466 build_20230721
qnap quts hero Versi h5.1.1.2488 build_20230812
qnap quts hero Versi h5.0.1.2045 build_20220526
qnap quts hero Versi h5.0.1.2192 build_20221020
qnap quts hero Versi h5.0.1.2248 build_20221215
qnap quts hero Versi h5.0.1.2269 build_20230104
qnap quts hero Versi h5.0.1.2277 build_20230112
qnap quts hero Versi h5.0.1.2348 build_20230324
qnap quts hero Versi h5.0.1.2376 build_20230421

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.