Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
CVE-2023-47568 Details
Description
A SQL injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users to inject malicious code via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.5.2645 build 20240116 and later QTS 4.5.4.2627 build 20231225 and later QuTS hero h5.1.5.2647 build 20240118 and later QuTS hero h4.5.4.2626 build 20231225 and later QuTScloud c5.1.5.2651 and later
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Aug 27, 2024Exploitation: NoneAutomatable: NoTechnical Impact: Total
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://www.qnap.com/en/security-advisory/qsa-24-05 | CVE | Vendor Advisory |
| https://www.qnap.com/en/security-advisory/qsa-24-05 | [email protected] | Vendor Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-89 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| qnap qts | 4.5.4.1715 build_20210630 4.5.4.1723 build_20210708 4.5.4.1741 build_20210726 4.5.4.1787 build_20210910 4.5.4.1800 build_20210923 4.5.4.1892 build_20211223 4.5.4.1931 build_20220128 4.5.4.2012 build_20220419 4.5.4.2117 build_20220802 4.5.4.2280 build_20230112 4.5.4.2374 build_20230416 4.5.4.2627 - 5.1.0.2348 build_20230325 5.1.0.2399 build_20230515 5.1.0.2418 build_20230603 5.1.0.2444 build_20230629 5.1.0.2466 build_20230721 5.1.1.2491 build_20230815 5.1.2.2533 build_20230926 5.1.3.2578 build_20231110 5.1.4.2596 build_20231128 5.1.5.2645 - |
CPE
Remediation
| |
| qnap quts hero | h4.5.4.1771 build_20210825 h4.5.4.1800 build_20210923 h4.5.4.1813 build_20211006 h4.5.4.1848 build_20211109 h4.5.4.1892 build_20211223 h4.5.4.1951 build_20220218 h4.5.4.1971 build_20220310 h4.5.4.1991 build_20220330 h4.5.4.2052 build_20220530 h4.5.4.2138 build_20220824 h4.5.4.2217 build_20221111 h4.5.4.2272 build_20230105 h4.5.4.2374 build_20230417 h4.5.4.2476 build_20230728 h4.5.4.2626 - h5.1.0.2409 build_20230525 h5.1.0.2424 build_20230609 h5.1.0.2453 build_20230708 h5.1.0.2466 build_20230721 h5.1.1.2488 build_20230812 h5.1.2.2534 build_20230927 h5.1.3.2578 build_20231110 h5.1.4.2596 build_20231128 h5.1.5.2647 - |
CPE
Remediation
| |
| qnap qutscloud | c5.1.0.2498 build_20230822 |
CPE
Remediation
| |
Change History
6 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Nov 21, 2024 | CVE Modified | CVE |
| May 14, 2024 | CVE Modified | [email protected] |
| Feb 8, 2024 | Initial Analysis | [email protected] |
| Feb 2, 2024 | New CVE Received | [email protected] |