vulnerability
QNAP QTS: CVE-2023-45025: Vulnerability in QTS, QuTS hero and QuTScloud
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 9 | (AV:N/AC:M/Au:N/C:C/I:C/A:C) | Feb 3, 2024 | Aug 4, 2025 | Oct 16, 2025 |
Severity
9
CVSS
(AV:N/AC:M/Au:N/C:C/I:C/A:C)
Published
Feb 3, 2024
Added
Aug 4, 2025
Modified
Oct 16, 2025
Description
An OS command injection vulnerability has been reported to affect certain QNAP operating system versions. If exploited, the vulnerability could allow users to execute commands via a network when the system is in a certain configuration.
Solution
qnap-qts-upgrade-latest
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.