QNAP QTS 4.2.6 Build 20230621
Approved changes feed: RSS · Atom
cpe:2.3:o:qnap:qts:4.2.6:build_20230621:*:*:*:*:*:*
part: o version: 4.2.6 update: build_20230621
| Vendor | Qnap (a402dda4-b7da-50eb-b0f8-700e564ee87d) |
|---|---|
| Product | Qts (9004baf2-b431-53ba-b074-38fcdcfcd981) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-50358 |
vulnerable | 2026-06-08 06:16:16.006126 |
QTS, QuTS hero, QuTScloud
MEDIUM (5.8)
An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to execute commands via a network.
We have already fixed the vulnerability in the following versions:
QTS 5.1.5.2645 build 20240116 and later
QTS 4.5.4.2627 build 20231225 and later
QTS 4.3.6.2665 build 20240131 and later
QTS 4.3.4.2675 build 20240131 and later
QTS 4.3.3.2644 build 20240131 and later
QTS 4.2.6 build 20240131 and later
QuTS hero h5.1.5.2647 build 20240118 and later
QuTS hero h4.5.4.2626 build 20231225 and later
QuTScloud c5.1.5.2651 and later
Published: 2024-02-13T02:45:22.351Z
Updated: 2025-05-09T18:16:31.828Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-39300 |
vulnerable | 2026-06-08 06:09:36.983565 |
QTS
HIGH (7.2)
An OS command injection vulnerability has been reported to affect legacy QTS. If exploited, the vulnerability could allow authenticated administrators to execute commands via a network.
We have already fixed the vulnerability in the following versions:
QTS 4.3.6.2805 build 20240619 and later
QTS 4.3.4.2814 build 20240618 and later
QTS 4.3.3.2784 build 20240619 and later
QTS 4.2.6 build 20240618 and later
Published: 2024-09-06T16:27:04.275Z
Updated: 2024-09-06T17:44:00.200Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.