vulnerability
QNAP QTS: CVE-2023-23359: Vulnerabilities in QTS, QuTS hero and QuTScloud
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 7 | (AV:N/AC:L/Au:S/C:N/I:N/A:C) | Sep 16, 2023 | Aug 4, 2025 | Oct 16, 2025 |
Severity
7
CVSS
(AV:N/AC:L/Au:S/C:N/I:N/A:C)
Published
Sep 16, 2023
Added
Aug 4, 2025
Modified
Oct 16, 2025
Description
Two out-of-bounds write vulnerabilities have been reported to affect multiple QNAP operating systems. If exploited, the vulnerabilities allow authenticated users to launch a denial-of-service (DoS) attack via network vector. We have already fixed the vulnerability in the following operating system versions: QTS 5.0.1.2346 build 20230322 and later QTS 4.5.4.2374 build 20230416 and later QuTS hero h5.0.1.2348 build 20230324 and later QuTS hero h4.5.4.2374 build 20230417 and later QuTScloud c5.0.1.2374 and later
Solution
qnap-qts-upgrade-latest
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.