QNAP security advisories, November 2023

Every QNAP security advisory published in November 2023, from QNAP PSIRT ([email protected] CNA) via NVD, with its severity, CVEs and CISA KEV status. Open a record for affected and fixed versions and the vendor's own link.

Advisories: 7
Critical: 2
High: 3
In CISA KEV: 0
CVEs: 7

QNAP advisories published in November 2023

Nov 10, 2023
High [CVE-2023-41285] QuMagie: SQL injection vulnerability has been reported to affect QuMagie.
High7.4
Nov 10, 2023
High [CVE-2023-39295] QuMagie: OS command injection vulnerability has been reported to affect QuMagie.
High8.8
Nov 10, 2023
Medium [CVE-2023-23367] QTS: OS command injection vulnerability has been reported to affect several QNAP operating system versions.
Medium4.7
Nov 3, 2023
Critical [CVE-2023-23369] QTS: OS command injection vulnerability has been reported to affect several QNAP operating system versions.
Critical9.0
Nov 3, 2023
Critical [CVE-2023-23368] QTS: OS command injection vulnerability has been reported to affect several QNAP operating system versions.
Critical9.8
Nov 3, 2023
High [CVE-2023-39299] Music Station: path traversal vulnerability has been reported to affect Music Station.
High7.5
Nov 3, 2023
Medium [CVE-2023-39301] QTS: server-side request forgery (SSRF) vulnerability has been reported to affect several QNAP operating system versions.
Medium4.3

Get an email when QNAP publishes the next one.

See QNAP's last 90 days of advisories first. Then choose one product with live alerts free for life, or a free month of real-time alerts on everything with the severity, the fixed version and the vendor's link (card needed, then US$15/month; we email you before the first charge).

Alert me about QNAP

Dates are each advisory's publication date at the source, in UTC; a record with no source date is filed under the day VulniPulse first saw it.