CVE-2023-41282

HighCVSS 7.2/10Last modified Jun 17, 2026

Description

An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute commands via a network.

We have already fixed the vulnerability in the following versions: QTS 5.1.4.2596 build 20231128 and later QuTS hero h5.1.4.2596 build 20231128 and later QuTScloud c5.1.5.2651 and later

Metrics

CVSS 3.1 7.2/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-77 CWE-78

Affected software

No affected versions have been published.

Timeline

Published: Feb 2, 2024
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-412837.2An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability co CVE-2023-412848.8A SQL injection vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow authenticated users to inject CVE-2023-412858.8A SQL injection vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow authenticated users to inject CVE-2023-412878.8A SQL injection vulnerability has been reported to affect Video Station. If exploited, the vulnerability could allow users to inject malicio CVE-2023-412888.8An OS command injection vulnerability has been reported to affect Video Station. If exploited, the vulnerability could allow users to execut CVE-2023-412898.8An OS command injection vulnerability has been reported to affect QcalAgent. If exploited, the vulnerability could allow authenticated users CVE-2023-41297.5Dell Data Protection Central, version 19.9, contains an Inadequate Encryption Strength Vulnerability. An unauthenticated network attacker co CVE-2023-412904.9A path traversal vulnerability has been reported to affect QuFirewall. If exploited, the vulnerability could allow authenticated administrat CVE-2023-412914.9A path traversal vulnerability has been reported to affect QuFirewall. If exploited, the vulnerability could allow authenticated administrat CVE-2023-412927.2A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited,CVE-2023-412937.5Data security classification vulnerability in the DDMP module. Successful exploitation of this vulnerability may affect confidentiality.CVE-2023-412949.8The DP module has a service hijacking vulnerability.Successful exploitation of this vulnerability may affect some Super Device services.