CVE-2023-34980

Summary

CVE-2023-34980 is a newly discovered operating system command injection vulnerability that affects several QNAP versions, including QTS 4.5.4.2627 and QuTS hero h4.5.4.2626. This issue enables authenticated administrators to execute network commands, potentially leading to serious security consequences. The vulnerability has already been addressed in the mentioned QNAP versions released in December 2023. It's crucial for users to update their systems as soon as possible to mitigate the risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.