vulnerability

QNAP QTS: CVE-2023-41274: Multiple Vulnerabilities in QTS, QuTS hero and QuTScloud

Severity
5
CVSS
(AV:N/AC:L/Au:M/C:N/I:P/A:P)
Published
Feb 3, 2024
Added
Aug 4, 2025
Modified
Oct 16, 2025

Description

Multiple vulnerabilities have been reported to affect certain QNAP operating system versions: CVE-2023-41273: If exploited, the heap-based buffer overflow vulnerability could allow authenticated administrators to execute code via a network. CVE-2023-41274: If exploited, the NULL pointer dereference vulnerability could allow authenticated administrators to launch a denial-of-service (DoS) attack via a network. CVE-2023-41275, CVE-2023-41276, CVE-2023-41277, CVE-2023-41278, CVE-2023-41279, CVE-2023-41280: If exploited, these buffer copy without checking size of input vulnerabilities could allow authenticated administrators to execute code via a network. We have already fixed the vulnerabilities in the following versions:

Solution

qnap-qts-upgrade-latest
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.