CVE-2023-50363

Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

Published: 26/04/2024 Updated: 26/04/2024

An incorrect authorization vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users to bypass intended access restrictions via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.6.2722 build 20240402 and later QuTS hero h5.1.6.2734 build 20240414 and later

QNAP QTS zero-day in Share feature gets public RCE exploit

BleepingComputer • Bill Toulas • 20 May 2024

QNAP QTS zero-day in Share feature gets public RCE exploit By Bill Toulas May 20, 2024 10:57 AM 0 An extensive security audit of QNAP QTS, the operating system for the company's NAS products, has uncovered fifteen vulnerabilities of varying severity, with eleven remaining unfixed. Among them is CVE-2024-27130, an unpatched stack buffer overflow vulnerability in the 'No_Support_ACL' function of 'share.cgi,' which could enable an attacker to perform remote code execution when specific pr...

CVE-2023-50363

Vulnerability Summary

Recent Articles

References

Vulmon Search

About

Products

Connect