CVE-2023-45037: QTS, QuTS hero, QuTScloud

First published: Fri Feb 02 2024(Updated: )

A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute code via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.3.2578 build 20231110 and later QuTS hero h5.1.3.2578 build 20231110 and later QuTScloud c5.1.5.2651 and later

Credit: security@qnapsecurity.com.tw

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

• collector/mitre-cve
• source/MITRE
• agent/remedy
• agent/weakness
• agent/title
• agent/references
• agent/first-publish-date
• agent/type
• agent/description
• agent/author
• agent/event
• agent/severity
• agent/last-modified-date
• collector/nvd-api
• source/NVD
• agent/software-canonical-lookup
• agent/software-canonical-lookup-request
• agent/softwarecombine
• collector/epss-latest
• source/FIRST
• agent/tags
• agent/epss
• vendor/qnap
• canonical/qnap qts
• version/qnap qts/5.1.0.2348-build_20230325
• version/qnap qts/5.1.0.2399-build_20230515
• version/qnap qts/5.1.0.2418-build_20230603
• version/qnap qts/5.1.0.2444-build_20230629
• version/qnap qts/5.1.0.2466-build_20230721
• version/qnap qts/5.1.1.2491-build_20230815
• version/qnap qts/5.1.2.2533-build_20230926
• version/qnap qts/5.1.3.2578
• canonical/qnap quts hero
• version/qnap quts hero/h5.1.0.2409-build_20230525
• version/qnap quts hero/h5.1.0.2424-build_20230609
• version/qnap quts hero/h5.1.0.2453-build_20230708
• version/qnap quts hero/h5.1.0.2466-build_20230721
• version/qnap quts hero/h5.1.1.2488-build_20230812
• version/qnap quts hero/h5.1.2.2534-build_20230927
• version/qnap quts hero/h5.1.3.2578
• canonical/qnap qutscloud
• version/qnap qutscloud/c5.1.0.2498-build_20230822