CVE-2023-39302

Summary

CVE-2023-39302 is a newly discovered OS command injection vulnerability that affects several QNAP operating system versions. This issue allows authenticated administrators to inject commands over a network, potentially leading to serious security consequences. The affected versions include QTS 5.1.3.2578, QuTS hero h5.1.3.2578, and QuTScloud c5.1.5.2651. QNAP has already released patches for these vulnerabilities, and users are strongly encouraged to update their systems to the latest versions to mitigate the risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.