What is the severity of CVE-2023-34972?

The severity of CVE-2023-34972 is medium, with a CVSS score of 6.5.

Which QNAP operating systems are affected by CVE-2023-34972?

QNAP QTS versions 5.0.1.2425 and below, QTS versions 5.1.0.2444 and below, and QNAP Quts Hero version h5.1.0.2424 and below are affected by CVE-2023-34972.

How do I fix CVE-2023-34972?

To fix CVE-2023-34972, update your QNAP operating system to a version that is not affected by the vulnerability. Please refer to the QNAP Security Advisory QSA-23-58 for more information.

Vulnerability/
CVE-2023-34972

medium

6.5

CWE

319

24/8/2023

31/8/2023

CVE-2023-34972

Q: What is CVE-2023-34972?

CVE-2023-34972 is a cleartext transmission of sensitive information vulnerability that affects QNAP operating systems.

Q: How does CVE-2023-34972 affect QNAP operating systems?

CVE-2023-34972 allows local network clients to read the contents of unexpected sensitive data via unspecified vectors.

First published: Thu Aug 24 2023(Updated: )

A cleartext transmission of sensitive information vulnerability has been reported to affect QNAP operating systems. If exploited, the vulnerability possibly allows local network clients to read the contents of unexpected sensitive data via unspecified vectors. We have already fixed the vulnerability in the following versions: QTS 5.0.1.2425 build 20230609 and later QTS 5.1.0.2444 build 20230629 and later QuTS hero h5.1.0.2424 build 20230609 and later

Credit: security@qnapsecurity.com.tw security@qnapsecurity.com.tw

Affected Software	Affected Version	How to fix
QNAP QTS	>=5.0.1<5.0.1.2425
QNAP QTS	>=5.1.0<5.1.0.2444
QNAP QuTS hero	>=h5.1.0<h5.1.0.2424

Never miss a vulnerability like this again

Reference Links

https://www.qnap.com/en/security-advisory/qsa-23-58

Frequently Asked Questions

What is CVE-2023-34972?
CVE-2023-34972 is a cleartext transmission of sensitive information vulnerability that affects QNAP operating systems.
How does CVE-2023-34972 affect QNAP operating systems?
CVE-2023-34972 allows local network clients to read the contents of unexpected sensitive data via unspecified vectors.
What is the severity of CVE-2023-34972?
The severity of CVE-2023-34972 is medium, with a CVSS score of 6.5.
Which QNAP operating systems are affected by CVE-2023-34972?
QNAP QTS versions 5.0.1.2425 and below, QTS versions 5.1.0.2444 and below, and QNAP Quts Hero version h5.1.0.2424 and below are affected by CVE-2023-34972.
How do I fix CVE-2023-34972?
To fix CVE-2023-34972, update your QNAP operating system to a version that is not affected by the vulnerability. Please refer to the QNAP Security Advisory QSA-23-58 for more information.

agent/references
agent/severity
agent/weakness
agent/author
agent/type
agent/event
agent/description
agent/last-modified-date
agent/softwarecombine
agent/first-publish-date
agent/tags
collector/nvd-api
agent/software-canonical-lookup-request
collector/nvd-index
vendor/qnap
canonical/qnap qts
version/qnap qts/5.0.1
version/qnap qts/5.1.0
canonical/qnap quts hero
version/qnap quts hero/h5.1.0

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.