vulnerability
QNAP QTS: CVE-2023-45036: Multiple Vulnerabilities in QTS, QuTS hero and QuTScloud
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 5 | (AV:N/AC:L/Au:M/C:N/I:P/A:P) | Feb 3, 2024 | Aug 4, 2025 | Oct 16, 2025 |
Severity
5
CVSS
(AV:N/AC:L/Au:M/C:N/I:P/A:P)
Published
Feb 3, 2024
Added
Aug 4, 2025
Modified
Oct 16, 2025
Description
Multiple buffer copy without checking size of input vulnerabilities have been reported to affect certain QNAP operating system versions. If exploited, these vulnerabilities could allow authenticated administrators to execute code via a network. We have already fixed the vulnerabilities in the following versions:
Solution
qnap-qts-upgrade-latest
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.