CVE-2023-39298

qnap qts, qnap quts hero

TLP:CLEAR

csirt@kutim:~/threat-intel/cve/CVE-2023-39298

Katalog CVE

CVSS 7.8 · High EPSS 0,14%

Kerentanan Missing Authorization pada qnap qts, qnap quts hero. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

A missing authorization vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow local authenticated users to access data or perform actions that they should not be allowed to perform via unspecified vectors. QuTScloud, is not affected. We have already fixed the vulnerability in the following versions: QTS 5.2.0.2737 build 20240417 and later QuTS hero h5.2.0.2782 build 20240601 and later

Rincian

Terbit di NVD
6 September 2024
Terakhir diubah
17 Juni 2026
Status NVD
Analyzed
CVSS 3.1
7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-862: Missing Authorization
EPSS (30 hari)
0,14% peluang dieksploitasi; lebih tinggi dari 2,9% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
qnap qts Versi 5.1.0.2348 build_20230325
qnap qts Versi 5.1.0.2399 build_20230515
qnap qts Versi 5.1.0.2418 build_20230603
qnap qts Versi 5.1.0.2444 build_20230629
qnap qts Versi 5.1.0.2466 build_20230721
qnap qts Versi 5.1.1.2491 build_20230815
qnap qts Versi 5.1.2.2533 build_20230926
qnap qts Versi 5.1.3.2578 build_20231110
qnap qts Versi 5.1.4.2596 build_20231128
qnap qts Versi 5.1.5.2645 build_20240116
qnap qts Versi 5.1.5.2679 build_20240219
qnap qts Versi 5.1.6.2722 build_20240402
qnap qts Versi 5.1.7.2770 build_20240520
qnap qts Versi 5.1.8.2823 build_20240712
qnap qts Versi 5.2.0.2737 build_20240417
qnap qts Versi 5.2.0.2744 build_20240424
qnap quts hero Versi h5.1.0.2409 build_20230525
qnap quts hero Versi h5.1.0.2424 build_20230609
qnap quts hero Versi h5.1.0.2453 build_20230708
qnap quts hero Versi h5.1.0.2466 build_20230721
qnap quts hero Versi h5.1.1.2488 build_20230812
qnap quts hero Versi h5.1.2.2534 build_20230927
qnap quts hero Versi h5.1.3.2578 build_20231110
qnap quts hero Versi h5.1.4.2596 build_20231128
qnap quts hero Versi h5.1.5.2647 build_20240118
qnap quts hero Versi h5.1.5.2680 build_20240220
qnap quts hero Versi h5.1.6.2734 build_20240414
qnap quts hero Versi h5.1.7.2770 build_20240520
qnap quts hero Versi h5.1.7.2788 build_20240607
qnap quts hero Versi h5.1.7.2794 build_20240613
qnap quts hero Versi h5.1.8.2823 build_20240712
qnap quts hero Versi h5.2.0.2737 build_20240417

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.