CVE-2023-50363
April 26, 2024, 3:32 p.m.
Tags
CVSS Score
Product(s) Impacted
QNAP QTS
- 5.1.6.2722 and later
QNAP QuTS hero
- h5.1.6.2734 and later
Description
An incorrect authorization vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users to bypass intended access restrictions via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.6.2722 build 20240402 and later QuTS hero h5.1.6.2734 build 20240414 and later
Weaknesses
Date
Published: April 26, 2024, 3:15 p.m.
Last Modified: April 26, 2024, 3:32 p.m.
Status : Awaiting Analysis
CVE has been marked for Analysis. Normally once in this state the CVE will be analyzed by NVD staff within 24 hours.
More infoSource
security@qnapsecurity.com.tw
CVSS Data
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
Base Score
Exploitability Score
Impact Score
Base Severity
HIGHCVSS Vector String
The CVSS vector string provides an in-depth view of the vulnerability metrics.
View Vector StringCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L