PT-2023-4592 · Qnap · Qnap Quts Hero H5.1.0+1

Domen Puncer Kugler · Publicado 2023-08-24 · Atualizado 2023-08-31 · CVE-2023-34973

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions QNAP QTS versions prior to 5.0.1.2425 build 20230609 QNAP QTS versions prior to 5.1.0.2444 build 20230629 QNAP QuTS hero h5.1.0 versions prior to 2424 build 20230609

Description An insufficient entropy issue affects QNAP operating systems, potentially allowing remote users to predict secrets via unspecified vectors. This could enable unauthorized access to confidential data.

Recommendations For QNAP QTS versions prior to 5.0.1.2425 build 20230609, update to QTS 5.0.1.2425 build 20230609 or later. For QNAP QTS versions prior to 5.1.0.2444 build 20230629, update to QTS 5.1.0.2444 build 20230629 or later. For QNAP QuTS hero h5.1.0 versions prior to 2424 build 20230609, update to QuTS hero h5.1.0.2424 build 20230609 or later.

Correção

Enumeração de Fraquezas

CWE-331

Identificadores relacionados

BDU:2023-04999

CVE-2023-34973

Produtos afetados

Qnap Qts

Qnap Quts Hero H5.1.0

Referências · 8

• https://bdu.fstec.ru/vul/2023-04999 · Nota de Segurança
• https://t.me/cvenotify/57194 · Publicação no Telegram
• https://qnap.com/en/security-advisory/qsa-23-59 · Aviso do Fabricante
• https://qnap.com/en/security-advisory/qsa-23-58 · Nota
• https://t.me/cibsecurity/69123 · Publicação no Telegram
• https://vuldb.com/ru/?id.237920 · Nota
• https://osv.dev/vulnerability/CVE-2023-34973 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-34973 · Nota de Segurança