VYPR
← All advisories
Medium severity6.6NVD Advisory· Published Sep 6, 2024· Updated Jun 17, 2026

CVE-2023-34979

CVE-2023-34979

Description

An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute commands via a network.

We have already fixed the vulnerability in the following versions: QTS 4.5.4.2790 build 20240605 and later QuTS hero h4.5.4.2790 build 20240606 and later

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

32
  • Qnap/Qtsllm-fuzzy14 versions
    QTS 4.5.4.2790 build 20240605 and later+ 13 more
    • (no CPE)range: QTS 4.5.4.2790 build 20240605 and later
    • cpe:2.3:o:qnap:qts:4.5.4.2627:build_20231225:*:*:*:*:*:*
    • cpe:2.3:o:qnap:qts:4.5.4.1715:build_20210630:*:*:*:*:*:*
    • cpe:2.3:o:qnap:qts:4.5.4.1723:build_20210708:*:*:*:*:*:*
    • cpe:2.3:o:qnap:qts:4.5.4.1741:build_20210726:*:*:*:*:*:*
    • cpe:2.3:o:qnap:qts:4.5.4.1787:build_20210910:*:*:*:*:*:*
    • cpe:2.3:o:qnap:qts:4.5.4.1800:build_20210923:*:*:*:*:*:*
    • cpe:2.3:o:qnap:qts:4.5.4.1892:build_20211223:*:*:*:*:*:*
    • cpe:2.3:o:qnap:qts:4.5.4.1931:build_20220128:*:*:*:*:*:*
    • cpe:2.3:o:qnap:qts:4.5.4.2012:build_20220419:*:*:*:*:*:*
    • cpe:2.3:o:qnap:qts:4.5.4.2117:build_20220802:*:*:*:*:*:*
    • cpe:2.3:o:qnap:qts:4.5.4.2280:build_20230112:*:*:*:*:*:*
    • cpe:2.3:o:qnap:qts:4.5.4.2374:build_20230416:*:*:*:*:*:*
    • cpe:2.3:o:qnap:qts:4.5.4.2467:build_20230718:*:*:*:*:*:*
  • Qnap/Quts Herollm-fuzzy16 versions
    h4.5.4.2790 build 20240606 and later+ 15 more
    • (no CPE)range: h4.5.4.2790 build 20240606 and later
    • cpe:2.3:o:qnap:quts_hero:h4.5.4.1848:build_20211109:*:*:*:*:*:*
    • cpe:2.3:o:qnap:quts_hero:h4.5.4.1951:build_20220218:*:*:*:*:*:*
    • cpe:2.3:o:qnap:quts_hero:h4.5.4.1971:build_20220310:*:*:*:*:*:*
    • cpe:2.3:o:qnap:quts_hero:h4.5.4.1771:build_20210825:*:*:*:*:*:*
    • cpe:2.3:o:qnap:quts_hero:h4.5.4.1800:build_20210923:*:*:*:*:*:*
    • cpe:2.3:o:qnap:quts_hero:h4.5.4.1813:build_20211006:*:*:*:*:*:*
    • cpe:2.3:o:qnap:quts_hero:h4.5.4.1892:build_20211223:*:*:*:*:*:*
    • cpe:2.3:o:qnap:quts_hero:h4.5.4.1991:build_20220330:*:*:*:*:*:*
    • cpe:2.3:o:qnap:quts_hero:h4.5.4.2052:build_20220530:*:*:*:*:*:*
    • cpe:2.3:o:qnap:quts_hero:h4.5.4.2138:build_20220824:*:*:*:*:*:*
    • cpe:2.3:o:qnap:quts_hero:h4.5.4.2217:build_20221111:*:*:*:*:*:*
    • cpe:2.3:o:qnap:quts_hero:h4.5.4.2272:build_20230105:*:*:*:*:*:*
    • cpe:2.3:o:qnap:quts_hero:h4.5.4.2374:build_20230417:*:*:*:*:*:*
    • cpe:2.3:o:qnap:quts_hero:h4.5.4.2476:build_20230728:*:*:*:*:*:*
    • cpe:2.3:o:qnap:quts_hero:h4.5.4.2626:build_20231225:*:*:*:*:*:*
  • QNAP Systems Inc./QTScpe-rescue
    Range: 4.5.x
  • QNAP Systems Inc./QuTS herocpe-rescue
    Range: h4.5.x

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.