QTS, QuTS hero, QuTScloud

CVE-2023-45036

What is CVE-2023-45036?

A vulnerability has been identified in several versions of the QNAP operating system, characterized by a buffer copy operation that does not adequately validate the size of the input. This oversight may be exploited by authenticated administrators to execute arbitrary code through a network interface. It represents a serious risk to system integrity and emphasizes the necessity of regular software updates to mitigate potential threats. The issue has been addressed in the latest software versions, underscoring the critical importance of maintaining up-to-date systems.

References