QNAP QTS 4.3.4.1976 Build 20220303

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:o:qnap:qts:4.3.4.1976:build_20220303:*:*:*:*:*:*

part: o version: 4.3.4.1976 update: build_20220303

VendorQnap (a402dda4-b7da-50eb-b0f8-700e564ee87d)
ProductQts (9004baf2-b431-53ba-b074-38fcdcfcd981)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-39300 vulnerable 2026-06-08 06:09:36.952780 QTS
HIGH (7.2)
An OS command injection vulnerability has been reported to affect legacy QTS. If exploited, the vulnerability could allow authenticated administrators to execute commands via a network. We have already fixed the vulnerability in the following versions: QTS 4.3.6.2805 build 20240619 and later QTS 4.3.4.2814 build 20240618 and later QTS 4.3.3.2784 build 20240619 and later QTS 4.2.6 build 20240618 and later
Published: 2024-09-06T16:27:04.275Z
Updated: 2024-09-06T17:44:00.200Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-23369 vulnerable 2026-06-08 05:54:28.230292 QTS, Multimedia Console, and Media Streaming add-on
CRITICAL (9)
An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to execute commands via a network. We have already fixed the vulnerability in the following versions: Multimedia Console 2.1.2 ( 2023/05/04 ) and later Multimedia Console 1.4.8 ( 2023/05/05 ) and later QTS 5.1.0.2399 build 20230515 and later QTS 4.3.6.2441 build 20230621 and later QTS 4.3.4.2451 build 20230621 and later QTS 4.3.3.2420 build 20230621 and later QTS 4.2.6 build 20230621 and later Media Streaming add-on 500.1.1.2 ( 2023/06/12 ) and later Media Streaming add-on 500.0.0.11 ( 2023/06/16 ) and later
Published: 2023-11-03T16:34:40.084Z
Updated: 2025-02-27T20:34:32.639Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.