VYPR
← All advisories
High severity8.8NVD Advisory· Published Sep 6, 2024· Updated Jun 17, 2026

CVE-2023-34974

CVE-2023-34974

Description

An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to execute commands via a network. QuTScloud, QVR, QES are not affected.

We have already fixed the vulnerability in the following versions: QTS 4.5.4.2790 build 20240605 and later QuTS hero h4.5.4.2626 build 20231225 and later

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

35
  • Qnap/Qts14 versions
    cpe:2.3:o:qnap:qts:4.5.4.1715:build_20210630:*:*:*:*:*:*+ 13 more
    • cpe:2.3:o:qnap:qts:4.5.4.1715:build_20210630:*:*:*:*:*:*
    • cpe:2.3:o:qnap:qts:4.5.4.1723:build_20210708:*:*:*:*:*:*
    • cpe:2.3:o:qnap:qts:4.5.4.1741:build_20210726:*:*:*:*:*:*
    • cpe:2.3:o:qnap:qts:4.5.4.1787:build_20210910:*:*:*:*:*:*
    • cpe:2.3:o:qnap:qts:4.5.4.1800:build_20210923:*:*:*:*:*:*
    • cpe:2.3:o:qnap:qts:4.5.4.1892:build_20211223:*:*:*:*:*:*
    • cpe:2.3:o:qnap:qts:4.5.4.1931:build_20220128:*:*:*:*:*:*
    • cpe:2.3:o:qnap:qts:4.5.4.2012:build_20220419:*:*:*:*:*:*
    • cpe:2.3:o:qnap:qts:4.5.4.2117:build_20220802:*:*:*:*:*:*
    • cpe:2.3:o:qnap:qts:4.5.4.2280:build_20230112:*:*:*:*:*:*
    • cpe:2.3:o:qnap:qts:4.5.4.2374:build_20230416:*:*:*:*:*:*
    • cpe:2.3:o:qnap:qts:4.5.4.2467:build_20230718:*:*:*:*:*:*
    • cpe:2.3:o:qnap:qts:4.5.4.2627:build_20231225:*:*:*:*:*:*
    • (no CPE)range: QTS 4.5.4.2790 build 20240605 and later
  • Qnap/Quts Hero16 versions
    cpe:2.3:o:qnap:quts_hero:h4.5.4.1771:build_20210825:*:*:*:*:*:*+ 15 more
    • cpe:2.3:o:qnap:quts_hero:h4.5.4.1771:build_20210825:*:*:*:*:*:*
    • cpe:2.3:o:qnap:quts_hero:h4.5.4.1800:build_20210923:*:*:*:*:*:*
    • cpe:2.3:o:qnap:quts_hero:h4.5.4.1813:build_20211006:*:*:*:*:*:*
    • cpe:2.3:o:qnap:quts_hero:h4.5.4.1848:build_20211109:*:*:*:*:*:*
    • cpe:2.3:o:qnap:quts_hero:h4.5.4.1892:build_20211223:*:*:*:*:*:*
    • cpe:2.3:o:qnap:quts_hero:h4.5.4.1951:build_20220218:*:*:*:*:*:*
    • cpe:2.3:o:qnap:quts_hero:h4.5.4.1971:build_20220310:*:*:*:*:*:*
    • cpe:2.3:o:qnap:quts_hero:h4.5.4.1991:build_20220330:*:*:*:*:*:*
    • cpe:2.3:o:qnap:quts_hero:h4.5.4.2052:build_20220530:*:*:*:*:*:*
    • cpe:2.3:o:qnap:quts_hero:h4.5.4.2138:build_20220824:*:*:*:*:*:*
    • cpe:2.3:o:qnap:quts_hero:h4.5.4.2217:build_20221111:*:*:*:*:*:*
    • cpe:2.3:o:qnap:quts_hero:h4.5.4.2272:build_20230105:*:*:*:*:*:*
    • cpe:2.3:o:qnap:quts_hero:h4.5.4.2374:build_20230417:*:*:*:*:*:*
    • cpe:2.3:o:qnap:quts_hero:h4.5.4.2476:build_20230728:*:*:*:*:*:*
    • cpe:2.3:o:qnap:quts_hero:h4.5.4.2626:build_20231225:*:*:*:*:*:*
    • (no CPE)range: QuTS hero h4.5.4.2626 build 20231225 and later
  • QNAP Systems Inc./QESv5
    Range: 2.2.0
  • QNAP Systems Inc./QTScpe-rescue
    Range: 4.5.x
  • QNAP Systems Inc./QuTS herocpe-rescue
    Range: h4.5.x
  • QNAP Systems Inc./QuTScloudcpe-rescue
    Range: c5.x.x
  • QNAP Systems Inc./QVRv5
    Range: 5.1.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.