Vulnerabilityhigh

QNAP fixed Sudo privilege escalation bug in NAS devices

Security Affairsby @securityaffairsMar 31, 2023 · 20:38 UTC (Mar 31, 2023)2 min read2 · 1 read

Read at securityaffairs.com

Analyze CVE-2023-22809 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2023-22809

Tags: cve-2023-22809 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2023-22809	In Sudo before 1.9.12p2, the sudoedit (aka -e) feature mishandles extra arguments passed in the user-provided environment variables (SUDO_EDITOR, VISUAL, and…	7.8	55%	PoC ×3	Jan 18, 2023

From the original article

2 min read at securityaffairs.com

Taiwanese vendor QNAP warns customers to patch a high-severity Sudo privilege escalation bug affecting NAS devices. Taiwanese vendor QNAP warns customers to update their network-attached storage (NAS) devices to address a high-severity Sudo privilege escalation vulnerability tracked as CVE-2023-22809 .

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.