CVE-2023-34979
06.09.2024, 17:15
An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute commands via a network. We have already fixed the vulnerability in the following versions: QTS 4.5.4.2790 build 20240605 and later QuTS hero h4.5.4.2790 build 20240606 and later
| Vendor | Product | Version |
|---|---|---|
| qnap | qts | 4.5.4.1715:build_20210630 |
| qnap | qts | 4.5.4.1723:build_20210708 |
| qnap | qts | 4.5.4.1741:build_20210726 |
| qnap | qts | 4.5.4.1787:build_20210910 |
| qnap | qts | 4.5.4.1800:build_20210923 |
| qnap | qts | 4.5.4.1892:build_20211223 |
| qnap | qts | 4.5.4.1931:build_20220128 |
| qnap | qts | 4.5.4.2012:build_20220419 |
| qnap | qts | 4.5.4.2117:build_20220802 |
| qnap | qts | 4.5.4.2280:build_20230112 |
| qnap | qts | 4.5.4.2374:build_20230416 |
| qnap | qts | 4.5.4.2467:build_20230718 |
| qnap | qts | 4.5.4.2627:build_20231225 |
𝑥
= Vulnerable software versions