VYPR
← All advisories
Medium severity4.7NVD Advisory· Published Nov 10, 2023· Updated Jun 17, 2026

CVE-2023-23367

CVE-2023-23367

Description

An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute commands via a network.

We have already fixed the vulnerability in the following versions: QTS 5.0.1.2376 build 20230421 and later QuTS hero h5.0.1.2376 build 20230421 and later QuTScloud c5.1.0.2498 and later

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

48
  • QNAP Systems Inc./QTScpe-rescue
    Range: 5.0.x
  • QNAP Systems Inc./QuTS herocpe-rescue
    Range: h5.0.x
  • Qnap/Qtsllm-fuzzy21 versions
    before 5.0.1.2376 build 20230421+ 20 more
    • (no CPE)range: before 5.0.1.2376 build 20230421
    • cpe:2.3:o:qnap:qts:5.0.0.1716:build_20210701:*:*:*:*:*:*
    • cpe:2.3:o:qnap:qts:5.0.0.1785:build_20210908:*:*:*:*:*:*
    • cpe:2.3:o:qnap:qts:5.0.0.1808:build_20211001:*:*:*:*:*:*
    • cpe:2.3:o:qnap:qts:5.0.0.1828:build_20211020:*:*:*:*:*:*
    • cpe:2.3:o:qnap:qts:5.0.0.1837:build_20211029:*:*:*:*:*:*
    • cpe:2.3:o:qnap:qts:5.0.0.1850:build_20211111:*:*:*:*:*:*
    • cpe:2.3:o:qnap:qts:5.0.0.1853:build_20211114:*:*:*:*:*:*
    • cpe:2.3:o:qnap:qts:5.0.0.1858:build_20211119:*:*:*:*:*:*
    • cpe:2.3:o:qnap:qts:5.0.0.1870:build_20211201:*:*:*:*:*:*
    • cpe:2.3:o:qnap:qts:5.0.1.2034:build_20220515:*:*:*:*:*:*
    • cpe:2.3:o:qnap:qts:5.0.1.2079:build_20220629:*:*:*:*:*:*
    • cpe:2.3:o:qnap:qts:5.0.1.2131:build_20220820:*:*:*:*:*:*
    • cpe:2.3:o:qnap:qts:5.0.1.2137:build_20220826:*:*:*:*:*:*
    • cpe:2.3:o:qnap:qts:5.0.1.2145:build_20220903:*:*:*:*:*:*
    • cpe:2.3:o:qnap:qts:5.0.1.2173:build_20221001:*:*:*:*:*:*
    • cpe:2.3:o:qnap:qts:5.0.1.2194:build_20221022:*:*:*:*:*:*
    • cpe:2.3:o:qnap:qts:5.0.1.2234:build_20221201:*:*:*:*:*:*
    • cpe:2.3:o:qnap:qts:5.0.1.2248:build_20221215:*:*:*:*:*:*
    • cpe:2.3:o:qnap:qts:5.0.1.2277:build_20230112:*:*:*:*:*:*
    • cpe:2.3:o:qnap:qts:5.0.1.2346:build_20230322:*:*:*:*:*:*
  • Qnap/Quts Herollm-fuzzy17 versions
    before h5.0.1.2376 build 20230421+ 16 more
    • (no CPE)range: before h5.0.1.2376 build 20230421
    • cpe:2.3:o:qnap:quts_hero:h5.0.0.1772:build_20210826:*:*:*:*:*:*
    • cpe:2.3:o:qnap:quts_hero:h5.0.0.1844:build_20211105:*:*:*:*:*:*
    • cpe:2.3:o:qnap:quts_hero:h5.0.0.1856:build_20211117:*:*:*:*:*:*
    • cpe:2.3:o:qnap:quts_hero:h5.0.0.1892:build_20211222:*:*:*:*:*:*
    • cpe:2.3:o:qnap:quts_hero:h5.0.0.1900:build_20211228:*:*:*:*:*:*
    • cpe:2.3:o:qnap:quts_hero:h5.0.0.1949:build_20220215:*:*:*:*:*:*
    • cpe:2.3:o:qnap:quts_hero:h5.0.0.1986:build_20220324:*:*:*:*:*:*
    • cpe:2.3:o:qnap:quts_hero:h5.0.0.2022:build_20220428:*:*:*:*:*:*
    • cpe:2.3:o:qnap:quts_hero:h5.0.0.2069:build_20220614:*:*:*:*:*:*
    • cpe:2.3:o:qnap:quts_hero:h5.0.0.2120:build_20220804:*:*:*:*:*:*
    • cpe:2.3:o:qnap:quts_hero:h5.0.1.2045:build_20220526:*:*:*:*:*:*
    • cpe:2.3:o:qnap:quts_hero:h5.0.1.2192:build_20221020:*:*:*:*:*:*
    • cpe:2.3:o:qnap:quts_hero:h5.0.1.2248:build_20221215:*:*:*:*:*:*
    • cpe:2.3:o:qnap:quts_hero:h5.0.1.2269:build_20230104:*:*:*:*:*:*
    • cpe:2.3:o:qnap:quts_hero:h5.0.1.2277:build_20230112:*:*:*:*:*:*
    • cpe:2.3:o:qnap:quts_hero:h5.0.1.2348:build_20230324:*:*:*:*:*:*
  • Qnap/QuTScloudllm-fuzzy7 versions
    before c5.1.0.2498+ 6 more
    • (no CPE)range: before c5.1.0.2498
    • cpe:2.3:o:qnap:qutscloud:c5.0.0.1919:build_20220119:*:*:*:*:*:*
    • cpe:2.3:o:qnap:qutscloud:c5.0.1.1949:build_20220218:*:*:*:*:*:*
    • cpe:2.3:o:qnap:qutscloud:c5.0.1.1998:build_20220408:*:*:*:*:*:*
    • cpe:2.3:o:qnap:qutscloud:c5.0.1.2044:build_20220524:*:*:*:*:*:*
    • cpe:2.3:o:qnap:qutscloud:c5.0.1.2148:build_20220905:*:*:*:*:*:*
    • cpe:2.3:o:qnap:qutscloud:c5.0.1.2374:build_20230419:*:*:*:*:*:*
  • QNAP Systems Inc./QuTScloudcpe-rescue
    Range: c5.x.x

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.