QTS, QuTS hero, QuTScloud

CVE-2023-41282

What is CVE-2023-41282?

An OS command injection vulnerability has been identified in multiple versions of the QNAP operating system. This security flaw allows authenticated administrators to potentially execute commands over the network, which can lead to unauthorized actions within the affected environment. QNAP has released updates to address this issue in QTS version 5.1.4.2596 build 20231128 and later, as well as in QuTS hero and QuTScloud versions that meet or exceed specified build numbers. Organizations utilizing the impacted versions are advised to apply the necessary updates to safeguard against exploitation.

References