vulnerability
QNAP QTS: CVE-2023-34975: Multiple Vulnerabilities in QTS, QuTS hero, and QuTScloud
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 6 | (AV:N/AC:L/Au:M/C:P/I:P/A:P) | Mar 9, 2024 | Aug 4, 2025 | Oct 16, 2025 |
Severity
6
CVSS
(AV:N/AC:L/Au:M/C:P/I:P/A:P)
Published
Mar 9, 2024
Added
Aug 4, 2025
Modified
Oct 16, 2025
Description
Two OS command injection vulnerabilities have been reported to affect certain QNAP operating system versions. If exploited, the vulnerabilities could allow remote attackers to execute arbitrary commands. We have already fixed the vulnerabilities in the following versions:
Solution
qnap-qts-upgrade-latest
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.