GCVE - cpe:2.3:o:qnap:quts_hero:h5.1.5.2647:-:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:qnap:quts_hero:h5.1.5.2647:-:*:*:*:*:*:*

part: o version: h5.1.5.2647 update: -

Vendor	Qnap (`a402dda4-b7da-50eb-b0f8-700e564ee87d`)
Product	Quts Hero (`c808c21e-6b74-58ae-ac08-bf1b891081da`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2023-50359`	vulnerable	2026-06-08 06:16:16.023493	QTS, QuTS hero LOW (3.4) An unchecked return value vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow local authenticated administrators to place the system in a state that could lead to a crash or other unintended behaviors via unspecified vectors. We have already fixed the vulnerability in the following versions: QTS 5.1.5.2645 build 20240116 and later QuTS hero h5.1.5.2647 build 20240118 and later Published: 2024-02-02T16:06:16.972Z Updated: 2024-08-02T22:16:46.521Z Open on db.gcve.eu Reference links https://www.qnap.com/en/security-advisory/qsa-24-07	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-50358`	vulnerable	2026-06-08 06:16:16.009429	QTS, QuTS hero, QuTScloud MEDIUM (5.8) An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to execute commands via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.5.2645 build 20240116 and later QTS 4.5.4.2627 build 20231225 and later QTS 4.3.6.2665 build 20240131 and later QTS 4.3.4.2675 build 20240131 and later QTS 4.3.3.2644 build 20240131 and later QTS 4.2.6 build 20240131 and later QuTS hero h5.1.5.2647 build 20240118 and later QuTS hero h4.5.4.2626 build 20231225 and later QuTScloud c5.1.5.2651 and later Published: 2024-02-13T02:45:22.351Z Updated: 2025-05-09T18:16:31.828Z Open on db.gcve.eu Reference links https://www.qnap.com/en/security-advisory/qsa-23-57 https://unit42.paloaltonetworks.com/qnap-qts-firmware-cve-2023-50358/ https://www.bsi.bund.de/SharedDocs/Cybersicherheitswarnungen/DE/2024/2024-213941-1032	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-47568`	vulnerable	2026-06-08 06:14:25.061242	QTS, QuTS hero, QuTScloud HIGH (8.8) A SQL injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users to inject malicious code via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.5.2645 build 20240116 and later QTS 4.5.4.2627 build 20231225 and later QuTS hero h5.1.5.2647 build 20240118 and later QuTS hero h4.5.4.2626 build 20231225 and later QuTScloud c5.1.5.2651 and later Published: 2024-02-02T16:06:10.742Z Updated: 2024-08-27T16:38:49.138Z Open on db.gcve.eu Reference links https://www.qnap.com/en/security-advisory/qsa-24-05	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-47567`	vulnerable	2026-06-08 06:14:25.056416	QTS, QuTS hero, QuTScloud MEDIUM (4.7) An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute commands via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.5.2645 build 20240116 and later QTS 4.5.4.2627 build 20231225 and later QuTS hero h5.1.5.2647 build 20240118 and later QuTS hero h4.5.4.2626 build 20231225 and later QuTScloud c5.1.5.2651 and later Published: 2024-02-02T16:06:05.095Z Updated: 2024-11-07T21:13:10.959Z Open on db.gcve.eu Reference links https://www.qnap.com/en/security-advisory/qsa-24-05	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-47566`	vulnerable	2026-06-08 06:14:25.024693	QTS, QuTS hero, QuTScloud MEDIUM (6.7) An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute commands via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.5.2645 build 20240116 and later QuTS hero h5.1.5.2647 build 20240118 and later QuTScloud c5.1.5.2651 and later Published: 2024-02-02T16:05:59.833Z Updated: 2025-06-16T19:36:40.669Z Open on db.gcve.eu Reference links https://www.qnap.com/en/security-advisory/qsa-24-04	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-47218`	vulnerable	2026-06-08 06:14:24.466900	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-45028`	vulnerable	2026-06-08 06:12:41.689919	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-45027`	vulnerable	2026-06-08 06:12:41.687882	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-45026`	vulnerable	2026-06-08 06:12:41.686415	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-41282`	vulnerable	2026-06-08 06:11:05.823524	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.