QTS, QuTS hero

CVE-2023-39294

What is CVE-2023-39294?

An OS command injection vulnerability exists in several versions of the QNAP operating system, which could potentially be exploited by authenticated administrators. This vulnerability enables the execution of arbitrary commands over a network, posing a significant risk to system integrity and data security. QNAP has addressed this issue in the QTS and QuTS hero updates released on November 10, 2023. It is crucial for users of affected versions to upgrade to the fixed builds to mitigate any possible exploitation risks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References