Test ID:	1.3.6.1.4.1.25623.1.0.126593
Category:	General
Title:	QNAP QuTS hero Multiple OS Command Injection Vulnerabilities (QSA-23-57) - Version Check
Summary:	QNAP QuTS hero is prone to multiple OS command injection; vulnerabilities.
Description:	Summary: QNAP QuTS hero is prone to multiple OS command injection vulnerabilities. Vulnerability Insight: The following vulnerabilities exist: - CVE-2023-47218, CVE-2023-50358: QNAP allows to an OS command injection. If exploited, it could allow users to execute commands via network. Affected Software/OS: QNAP QuTS hero version h4.x, h5.0.0, h5.0.1, h5.1.x. Solution: Update to version h4.5.4.2626 build 20231225, h5.1.5.2647 build 20240118 or later. CVSS Score: 4.3 CVSS Vector: AV:A/AC:H/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2023-47218 https://www.rapid7.com/blog/post/2024/02/13/cve-2023-47218-qnap-qts-and-quts-hero-unauthenticated-command-injection-fixed/ https://www.qnap.com/en/security-advisory/qsa-23-57 Common Vulnerability Exposure (CVE) ID: CVE-2023-50358 https://unit42.paloaltonetworks.com/qnap-qts-firmware-cve-2023-50358/ https://www.bsi.bund.de/SharedDocs/Cybersicherheitswarnungen/DE/2024/2024-213941-1032
Copyright	Copyright (C) 2024 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.