QNAP QuTS Hero H4.5.4.2138 Build 20220824
Approved changes feed: RSS · Atom
cpe:2.3:o:qnap:quts_hero:h4.5.4.2138:build_20220824:*:*:*:*:*:*
part: o version: h4.5.4.2138 update: build_20220824
| Vendor | Qnap (a402dda4-b7da-50eb-b0f8-700e564ee87d) |
|---|---|
| Product | Quts Hero (c808c21e-6b74-58ae-ac08-bf1b891081da) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-47568 |
vulnerable | 2026-06-08 06:14:25.060289 |
QTS, QuTS hero, QuTScloud
HIGH (8.8)
A SQL injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users to inject malicious code via a network.
We have already fixed the vulnerability in the following versions:
QTS 5.1.5.2645 build 20240116 and later
QTS 4.5.4.2627 build 20231225 and later
QuTS hero h5.1.5.2647 build 20240118 and later
QuTS hero h4.5.4.2626 build 20231225 and later
QuTScloud c5.1.5.2651 and later
Published: 2024-02-02T16:06:10.742Z
Updated: 2024-08-27T16:38:49.138Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-47567 |
vulnerable | 2026-06-08 06:14:25.051200 |
QTS, QuTS hero, QuTScloud
MEDIUM (4.7)
An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute commands via a network.
We have already fixed the vulnerability in the following versions:
QTS 5.1.5.2645 build 20240116 and later
QTS 4.5.4.2627 build 20231225 and later
QuTS hero h5.1.5.2647 build 20240118 and later
QuTS hero h4.5.4.2626 build 20231225 and later
QuTScloud c5.1.5.2651 and later
Published: 2024-02-02T16:06:05.095Z
Updated: 2024-11-07T21:13:10.959Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-45025 |
vulnerable | 2026-06-08 06:12:41.669751 |
QTS, QuTS hero, QuTScloud
CRITICAL (9)
An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to execute commands via a network.
We have already fixed the vulnerability in the following versions:
QTS 5.1.4.2596 build 20231128 and later
QTS 4.5.4.2627 build 20231225 and later
QuTS hero h5.1.4.2596 build 20231128 and later
QuTS hero h4.5.4.2626 build 20231225 and later
QuTScloud c5.1.5.2651 and later
Published: 2024-02-02T16:05:02.613Z
Updated: 2025-06-16T18:05:14.857Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-39297 |
vulnerable | 2026-06-08 06:09:36.882296 |
QTS, QuTS hero, QuTScloud
HIGH (8.8)
An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users to execute commands via a network.
We have already fixed the vulnerability in the following versions:
QTS 5.1.4.2596 build 20231128 and later
QTS 4.5.4.2627 build 20231225 and later
QuTS hero h5.1.4.2596 build 20231128 and later
QuTS hero h4.5.4.2626 build 20231225 and later
QuTScloud c5.1.5.2651 and later
Published: 2024-02-02T16:03:13.178Z
Updated: 2025-05-15T19:49:40.351Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-34979 |
vulnerable | 2026-06-08 06:06:26.303422 |
QTS, QuTS hero
MEDIUM (6.6)
An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute commands via a network.
We have already fixed the vulnerability in the following versions:
QTS 4.5.4.2790 build 20240605 and later
QuTS hero h4.5.4.2790 build 20240606 and later
Published: 2024-09-06T16:27:31.562Z
Updated: 2024-09-06T17:22:05.522Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-34974 |
vulnerable | 2026-06-08 06:06:26.294674 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-23372 |
vulnerable | 2026-06-08 05:54:28.276234 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-23368 |
vulnerable | 2026-06-08 05:54:28.205563 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.