This site currently shows sample data for demonstration.
BDVDB
বাংলা

Vulnerabilities

CVE-2023-41282 | BDVDB-2026-223532 Detail

QNAP SystemsQTS

Description#

An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute commands via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.4.2596 build 20231128 and later QuTS hero h5.1.4.2596 build 20231128 and later QuTScloud c5.1.5.2651 and later

Impact#

CAPEC-88

Weaknesses#

  • CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')
  • CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

References#

Exploit#

No public exploit known

History#

  1. Version 1Record published in the CVE List.
  2. Version 2Most recent update recorded in the CVE List.