VDB
CVE-2023-50361
CVE-2023-50361
PUBLISHED
CVSS 5 MEDIUM
QTS, QuTS hero
Reported by qnap · Published April 26, 2024
A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users to execute code via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.6.2722 build 20240402 and later QuTS hero h5.1.6.2734 build 20240414 and later
Risk scores
CVSS 3.1
5
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N
Affected products
| Vendor | Product | Versions |
|---|---|---|
| QNAP Systems Inc. | QTS | 5.1.x |
| QNAP Systems Inc. | QuTS hero | h5.1.x |
| qnap | quts_hero | * |
| QNAP Systems Inc. | QuTS hero | 5.1.x |
| qnap | qts | * |
| QNAP Systems Inc. | QTS | 5.1.x |
Timeline
- Apr 26, 2024 CVE Published
- Apr 27, 2024 EPSS Score (30 in total, the first dated here)
- Aug 2, 2024 CVE Updated
- Oct 5, 2024 Coalition ESS Score (7 in total, the first dated here)
- Jun 2, 2026 Security Advisory
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln CVE-2023-50361
vulnetix vdb fixes CVE-2023-50361Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/CVE-2023-50361/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart