PT-2023-8505 · Qnap · Qutscloud+2

Rekter0 · Publicado 2023-07-27 · Atualizado 2024-02-06 · CVE-2023-39303

Positive Technologies (AI Summary)

CVSS v2.0

10

Crítica

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions QTS versions prior to 5.1.3.2578 build 20231110 QuTS hero versions prior to h5.1.3.2578 build 20231110 QuTScloud versions prior to c5.1.5.2651

Description The issue is related to improper authentication procedures in QNAP operating systems, which could allow a remote attacker to compromise the target system.

Recommendations For QTS versions prior to 5.1.3.2578 build 20231110, update to version 5.1.3.2578 build 20231110 or later. For QuTS hero versions prior to h5.1.3.2578 build 20231110, update to version h5.1.3.2578 build 20231110 or later. For QuTScloud versions prior to c5.1.5.2651, update to version c5.1.5.2651 or later.

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

BDU:2024-01043

CVE-2023-39303

Produtos afetados

Qts

Quts Hero

Qutscloud

Referências · 7

• https://osv.dev/vulnerability/CVE-2023-39303 · Aviso do Fabricante
• https://twitter.com/RedPacketSec/status/1754808394706276712 · Publicação no Twitter
• https://bdu.fstec.ru/vul/2024-01043 · Nota de Segurança
• https://vuldb.com/ru/?id.252746 · Nota
• https://qnap.com/en/security-advisory/qsa-23-33 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-39303 · Nota de Segurança
• https://twitter.com/CVEnew/status/1753452535635976593 · Publicação no Twitter