QNAP Addresses OS Command Injection Vulnerability

CVE-2023-34979

Summary

An OS command injection vulnerability has been identified in multiple versions of the QNAP operating system, enabling authenticated administrators to execute arbitrary commands through a network interface. This vulnerability poses a significant risk, as it can be exploited to execute potentially harmful commands on affected devices. It is crucial for users to update their systems to the latest versions, specifically QTS 4.5.4.2790 build 20240605 or later, and QuTS hero h4.5.4.2790 build 20240606 or later, to mitigate the risk associated with this vulnerability.

References