QTS, QuTS hero, QuTScloud

CVE-2023-45037

Summary

A vulnerability has been identified in several versions of QNAP operating systems, characterized by a buffer copy process that lacks appropriate input size validation. This flaw may be exploited by authenticated administrators, enabling them to execute arbitrary code via network interactions. The potential for unauthorized access and execution of commands poses a significant security risk, stressing the importance of timely updates to the affected versions.

References