QTS, QuTS hero, QuTScloud

CVE-2023-45028

What is CVE-2023-45028?

An uncontrolled resource consumption vulnerability has been identified in various versions of QNAP's operating system. This flaw could potentially allow authenticated administrators to execute a denial-of-service (DoS) attack via network paths, leading to service disruptions. It is critical for administrators to ensure that their systems are updated to the fixed versions to mitigate this risk. QNAP has provided updates to address this issue in QTS 5.1.5.2645 build 20240116 and later, QuTS hero h5.1.5.2647 build 20240118 and later, as well as QuTScloud c5.1.5.2651 and later.

References