QTS, QuTS hero, QuTScloud

CVE-2023-45035

Summary

A vulnerability affecting multiple QNAP operating system versions has been identified, characterized as a buffer copy without input size verification. This defect potentially grants authenticated administrators the ability to execute arbitrary code remotely over the network, creating significant security risks. Mitigating this issue involves updating to the latest versions of QTS, QuTS hero, or QuTScloud as mentioned in the vendor's advisory. Organizations utilizing affected versions are strongly advised to implement patches promptly to secure their systems.

References