GCVE - cpe:2.3:o:qnap:quts_hero:h5.1.4.2596:-:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:qnap:quts_hero:h5.1.4.2596:-:*:*:*:*:*:*

part: o version: h5.1.4.2596 update: -

Vendor	Qnap (`a402dda4-b7da-50eb-b0f8-700e564ee87d`)
Product	Quts Hero (`c808c21e-6b74-58ae-ac08-bf1b891081da`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2023-45035`	vulnerable	2026-06-08 06:12:41.691471	QTS, QuTS hero, QuTScloud LOW (3.8) A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute code via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.4.2596 build 20231128 and later QuTS hero h5.1.4.2596 build 20231128 and later QuTScloud c5.1.5.2651 and later Published: 2024-02-02T16:05:25.788Z Updated: 2025-06-17T21:29:23.649Z Open on db.gcve.eu Reference links https://www.qnap.com/en/security-advisory/qsa-23-46	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-45025`	vulnerable	2026-06-08 06:12:41.678653	QTS, QuTS hero, QuTScloud CRITICAL (9) An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to execute commands via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.4.2596 build 20231128 and later QTS 4.5.4.2627 build 20231225 and later QuTS hero h5.1.4.2596 build 20231128 and later QuTS hero h4.5.4.2626 build 20231225 and later QuTScloud c5.1.5.2651 and later Published: 2024-02-02T16:05:02.613Z Updated: 2025-06-16T18:05:14.857Z Open on db.gcve.eu Reference links https://www.qnap.com/en/security-advisory/qsa-23-47	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-41292`	vulnerable	2026-06-08 06:11:05.848261	QTS, QuTS hero, QuTScloud LOW (3.8) A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute code via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.4.2596 build 20231128 and later QuTS hero h5.1.4.2596 build 20231128 and later QuTScloud c5.1.5.2651 and later Published: 2024-02-02T16:04:57.919Z Updated: 2025-06-17T21:29:23.513Z Open on db.gcve.eu Reference links https://www.qnap.com/en/security-advisory/qsa-23-46	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-41283`	vulnerable	2026-06-08 06:11:05.830647	QTS, QuTS hero, QuTScloud MEDIUM (5.5) An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute commands via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.4.2596 build 20231128 and later QuTS hero h5.1.4.2596 build 20231128 and later QuTScloud c5.1.5.2651 and later Published: 2024-02-02T16:04:53.120Z Updated: 2024-09-06T17:42:13.440Z Open on db.gcve.eu Reference links https://www.qnap.com/en/security-advisory/qsa-23-53	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-41281`	vulnerable	2026-06-08 06:11:05.808926	QTS, QuTS hero, QuTScloud MEDIUM (5.5) An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute commands via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.4.2596 build 20231128 and later QuTS hero h5.1.4.2596 build 20231128 and later QuTScloud c5.1.5.2651 and later Published: 2024-02-02T16:04:43.783Z Updated: 2025-05-15T19:49:26.415Z Open on db.gcve.eu Reference links https://www.qnap.com/en/security-advisory/qsa-23-53	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-39297`	vulnerable	2026-06-08 06:09:36.890437	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-32969`	vulnerable	2026-06-08 06:04:48.112285	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.