PT-2023-4592 · Qnap · Qnap Quts Hero H5.1.0+1

Domen Puncer Kugler · Published 2023-08-24 · Updated 2023-08-31 · CVE-2023-34973

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions QNAP QTS versions prior to 5.0.1.2425 build 20230609 QNAP QTS versions prior to 5.1.0.2444 build 20230629 QNAP QuTS hero h5.1.0 versions prior to 2424 build 20230609

Description An insufficient entropy issue affects QNAP operating systems, potentially allowing remote users to predict secrets via unspecified vectors. This could enable unauthorized access to confidential data.

Recommendations For QNAP QTS versions prior to 5.0.1.2425 build 20230609, update to QTS 5.0.1.2425 build 20230609 or later. For QNAP QTS versions prior to 5.1.0.2444 build 20230629, update to QTS 5.1.0.2444 build 20230629 or later. For QNAP QuTS hero h5.1.0 versions prior to 2424 build 20230609, update to QuTS hero h5.1.0.2424 build 20230609 or later.

Fix

Weakness Enumeration

CWE-331

Related Identifiers

BDU:2023-04999

CVE-2023-34973

Affected Products

Qnap Qts

Qnap Quts Hero H5.1.0

References · 8

• https://bdu.fstec.ru/vul/2023-04999 · Security Note
• https://qnap.com/en/security-advisory/qsa-23-59 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-34973 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-34973 · Security Note
• https://t.me/cvenotify/57194 · Telegram Post
• https://qnap.com/en/security-advisory/qsa-23-58 · Note
• https://t.me/cibsecurity/69123 · Telegram Post
• https://vuldb.com/ru/?id.237920 · Note