Test ID:	1.3.6.1.4.1.25623.1.0.151741
Category:	Web application abuses
Title:	QNAP QTS, QuTS hero, QuTScloud OS Command Injection Vulnerability (CVE-2023-47218, QSA-23-57) - Active Check
Summary:	QNAP QTS, QuTS hero and QuTScloud are prone to an OS command; injection vulnerability.
Description:	Summary: QNAP QTS, QuTS hero and QuTScloud are prone to an OS command injection vulnerability. Vulnerability Insight: An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to execute commands via a network. Solution: See the referenced vendor advisory for a solution. CVSS Score: 4.3 CVSS Vector: AV:A/AC:H/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2023-47218 https://www.rapid7.com/blog/post/2024/02/13/cve-2023-47218-qnap-qts-and-quts-hero-unauthenticated-command-injection-fixed/ https://www.qnap.com/en/security-advisory/qsa-23-57
Copyright	Copyright (C) 2024 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.