CVE-2023-45040

—

CVSS 3.1

7.2 high

EPSS

<1%p49

Published

Jan 5, 2024 (Jan 5, 2024)

Modified

Jun 17, 2026

Description

A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute code via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.4.2596 build 20231128 and later QuTS hero h5.1.4.2596 build 20231128 and later

Vendors: qnap
Products: qts, quts hero
Weakness: CWE-120
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.6%)

In the news0 stories

No ingested article mentions this CVE yet.