Medium severity6.6NVD Advisory· Published Oct 13, 2023· Updated Jun 17, 2026

CVE-2023-34975

Description

An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute commands via a network. QuTScloud is not affected.

We have already fixed the vulnerability in the following versions: QuTS hero h4.5.4.2626 build 20231225 and later QTS 4.5.4.2627 build 20231225 and later

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Qnap/Video Station
cpe:2.3:a:qnap:video_station:*:*:*:*:*:*:*:*
Range: <5.7.0
Qnap/QNAP operating systemllm-fuzzy
Qnap/Qtsllm-fuzzy
Qnap/Quts Herollm-fuzzy
QNAP Systems Inc./QTScpe-rescue
Range: 4.5.x
QNAP Systems Inc./QuTS herocpe-rescue
Range: h4.5.x
QNAP Systems Inc./QuTScloudcpe-rescue
Range: c5.x.x

cvss	0.429
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000

CVE-2023-34975

Description

AI Insight

Affected products

Patches

Vulnerability mechanics

References

News mentions