QNAP NAS Multiple Vulnerabilities

Release Date: 9 Jan 2024 2818 Views

RISK: Medium Risk

TYPE: Servers - Other Servers

Multiple vulnerabilities were identified in QNAP NAS. A remote attacker could exploit some of these vulnerabilities to trigger denial of service condition, remote code execution and data manipulation on the targeted system.

Impact

Remote Code Execution
Denial of Service
Data Manipulation

System / Technologies affected

QTS version prior to 5.1.3.2578 build 20231110
QTS version prior to 5.1.4.2596 build 20231128
QuTS hero version prior to h5.1.3.2578 build 20231110
QuTS hero version prior to h5.1.4.2596 build 20231128

Solutions

Before installation of the software, please visit the vendor web-site for more details.

Apply fixes issued by the vendor:
https://www.qnap.com/en/security-advisory/qsa-23-22
https://www.qnap.com/en/security-advisory/qsa-23-27
https://www.qnap.com/en/security-advisory/qsa-23-54
https://www.qnap.com/en/security-advisory/qsa-23-64

Vulnerability Identifier

Source

QNAP