CVSS 7.2 · High EPSS 1,1%
Kerentanan Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') pada qnap qts, qnap quts hero. Skor CVSS 3.1 7.2 (High) menurut NVD.
An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute commands via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.3.2578 build 20231110 and later QuTS hero h5.1.3.2578 build 20231110 and later
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
· uraikan di kalkulator | Vendor | Produk | Versi terdampak |
|---|---|---|
| qnap | qts | Versi 5.1.0.2348 build_20230325 |
| qnap | qts | Versi 5.1.0.2399 build_20230515 |
| qnap | qts | Versi 5.1.0.2418 build_20230603 |
| qnap | qts | Versi 5.1.0.2444 build_20230629 |
| qnap | qts | Versi 5.1.0.2466 build_20230721 |
| qnap | qts | Versi 5.1.1.2491 build_20230815 |
| qnap | qts | Versi 5.1.2.2533 build_20230926 |
| qnap | quts hero | Versi h5.1.0.2409 build_20230525 |
| qnap | quts hero | Versi h5.1.0.2424 build_20230609 |
| qnap | quts hero | Versi h5.1.0.2453 build_20230708 |
| qnap | quts hero | Versi h5.1.0.2466 build_20230721 |
| qnap | quts hero | Versi h5.1.1.2488 build_20230812 |
| qnap | quts hero | Versi h5.1.2.2534 build_20230927 |