OS Command Injection Vulnerability Affects QNAP Operating System Versions

CVE-2023-34980

What is CVE-2023-34980?

An OS command injection vulnerability has been identified in various versions of the QNAP operating system, impacting both QTS and QuTS hero products. This vulnerability allows authenticated administrators to execute arbitrary commands over the network, potentially compromising the security of the system. Users are encouraged to update to the latest versions, QTS 4.5.4.2627 build 20231225 and QuTS hero h4.5.4.2626 build 20231225 or later, to mitigate the risks associated with this vulnerability. For more information and guidance, refer to the official security advisory.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References