CVE-2023-51366

A path traversal vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to read the contents of unexpected files and expose sensitive data via a network.

We have already fixed the vulnerability in the following versions:
QTS 5.1.6.2722 build 20240402 and later
QuTS hero h5.1.6.2734 build 20240414 and later
Path Traversal
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
8.7 HIGH
NETWORK
HIGH
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:H
qnapCNA
8.7 HIGH
NETWORK
HIGH
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:H
CISA-ADPADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 26%
VendorProductVersion
qnapqts
5.1.0.2348:build_20230325
qnapqts
5.1.0.2399:build_20230515
qnapqts
5.1.0.2418:build_20230603
qnapqts
5.1.0.2444:build_20230629
qnapqts
5.1.0.2466:build_20230721
qnapqts
5.1.1.2491:build_20230815
qnapqts
5.1.2.2533:build_20230926
qnapqts
5.1.3.2578:build_20231110
qnapqts
5.1.4.2596:build_20231128
qnapqts
5.1.5.2645:build_20240116
qnapqts
5.1.5.2679:build_20240219
𝑥
= Vulnerable software versions