Approved changes feed: RSS · Atom

cpe:2.3:a:qnap_systems_inc.:qufirewall:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorQnap Systems Inc. (1f66ac1e-0889-51bf-b27f-24c7175e5920)
ProductQufirewall (1c7863d9-0929-5f4f-ac9c-f47cc3f8f1d1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-41291 vulnerable 2026-06-03 14:52:51.560763 QuFirewall
MEDIUM (5.5)
A path traversal vulnerability has been reported to affect QuFirewall. If exploited, the vulnerability could allow authenticated administrators to read the contents of unexpected files and expose sensitive data via a network. We have already fixed the vulnerability in the following version: QuFirewall 2.4.1 ( 2024/02/01 ) and later
Published: 2024-04-26T15:01:31.313Z
Updated: 2024-08-12T19:34:13.709Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-41290 vulnerable 2026-06-03 14:52:51.559502 QuFirewall
MEDIUM (4.1)
A path traversal vulnerability has been reported to affect QuFirewall. If exploited, the vulnerability could allow authenticated administrators to read the contents of unexpected files and expose sensitive data via a network. We have already fixed the vulnerability in the following version: QuFirewall 2.4.1 ( 2024/02/01 ) and later
Published: 2024-04-26T15:01:35.472Z
Updated: 2024-08-12T19:33:32.522Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-23356 vulnerable 2026-06-03 14:49:21.295816 QuFirewall
MEDIUM (5.5)
A command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to execute arbitrary commands. We have already fixed the vulnerability in the following versions: QuFirewall 2.3.3 ( 2023/03/27 ) and later and later
Published: 2024-12-19T01:39:15.645Z
Updated: 2024-12-24T00:41:02.334Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.