Qnap 漏洞

时间轴

类型

产品

QNAP QTS148
QNAP QuTS hero51
QNAP QuTScloud44
QNAP QuTS Hero27
QNAP Photo Station14

修正

Official Fix221
Temporary Fix1
Workaround0
Unavailable4
Not Defined54

易受攻击性

High5
Functional0
Proof-of-Concept14
Unproven1
Not Defined260

访问向量

Not Defined0
Physical0
Local15
Adjacent17
Network248

身份验证

Not Defined0
High62
Low76
None142

用户交互

Not Defined0
Required58
None222

C3BM Index

CVSSv3 Base

≤10
≤20
≤33
≤420
≤540
≤676
≤737
≤839
≤953
≤1012

CVSSv3 Temp

≤10
≤20
≤35
≤418
≤545
≤680
≤739
≤834
≤947
≤1012

VulDB

≤10
≤21
≤314
≤442
≤558
≤643
≤729
≤862
≤919
≤1012

NVD

≤10
≤21
≤30
≤40
≤513
≤68
≤732
≤845
≤923
≤1040

CNA

≤10
≤20
≤32
≤417
≤515
≤633
≤715
≤823
≤920
≤1013

供应商

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤81
≤90
≤100

零日攻击

<1k51
<2k134
<5k94
<10k0
<25k1
<50k0
<100k0
≥100k0

本日攻击

<1k280
<2k0
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

攻击市场容量

🔴 CTI 活动

Affected Products (52): Container Station (1), Helpdesk (5), Image2PDF (1), Kazoo Server (2), Media Streaming Add-on (1), Multimedia Console (4), Music Station (7), NAS (10), NAS Application Media Streaming Add-On (4), NVR (3), NVR Storage Expansion (2), NetBak Replicator (1), Photo Station (15), Proxy Server (4), Q'center (2), Q'center Virtual Appliance (7), QES (4), QSS (2), QTS (153), QUSBCam2 (2), QVP (3), QVPN (2), QVR (10), QVR Elite (5), QVR Guard (5), QVR Pro (5), QVR Pro Appliance (1), QVR Pro Client (1), QcalAgent (3), Qfile App (1), Qfinder Pro (1), QmailAgent (2), Qsync (1), Qsync Central (1), QuLog Center (1), QuMagie (6), QuNetSwitch (1), QuTS (5), QuTS Hero (27), QuTScloud (47), QuTS hero (56), SS-839 (1), Signage Station (4), Surveillance Station Pro (2), TS-469U Turbo NAS (1), TS212P (1), Ts-239 Pro Turbo Nas (3), Video Station (9), VioStor NVR (1), Viostor Network Video Recorder (1), myQNAPcloud (1), myQNAPcloud Connect (1)

Link to Vendor Website: https://www.qnap.com/

已发布BaseTemp漏洞Prod修正EPSSCTICVE
2024-03-083.63.6QNAP QuTScloud/QTS/QuTS hero Network/Virtual Switch 跨网站脚本Network Attached Storage SoftwareNot DefinedOfficial Fix0.000430.00CVE-2023-32969
2024-03-084.64.6QNAP Systems Photo Station 目录遍历未知Not DefinedOfficial Fix0.000440.06CVE-2023-47221
2024-03-084.74.6QNAP myQNAPcloud/QTS SQL注入Network Attached Storage SoftwareNot DefinedOfficial Fix0.000440.00CVE-2024-21901
2024-03-085.15.0QNAP QTS/QuTS hero 权限升级Network Attached Storage SoftwareNot DefinedOfficial Fix0.000430.08CVE-2023-34980
2024-03-085.75.6QNAP QTS/QuTS hero/QuTScloud 权限升级Network Attached Storage SoftwareNot DefinedOfficial Fix0.000460.02CVE-2024-21900
2024-03-089.89.6QNAP QTS/QuTS hero/QuTScloud 弱身份验证Network Attached Storage SoftwareNot DefinedOfficial Fix0.000910.04CVE-2024-21899
2024-02-135.45.3QNAP QTS/QuTS hero/QuTScloud 权限升级Network Attached Storage SoftwareNot DefinedOfficial Fix0.000460.04CVE-2023-50358
2024-02-135.45.3QNAP QTS/QuTS hero/QuTScloud 权限升级Network Attached Storage SoftwareNot DefinedOfficial Fix0.003050.03CVE-2023-47218
2024-02-025.25.2QNAP QTS/QuTS hero/QuTScloud 内存损坏Network Attached Storage SoftwareNot DefinedOfficial Fix0.000550.02CVE-2023-45035
2024-02-024.74.7QNAP QTS/QuTS hero/QuTScloud 目录遍历Network Attached Storage SoftwareNot DefinedOfficial Fix0.000500.02CVE-2023-45027
2024-02-024.44.3QNAP QTS/QuTS hero/QuTScloud 拒绝服务Network Attached Storage SoftwareNot DefinedOfficial Fix0.000440.02CVE-2023-45028
2024-02-024.74.7QNAP QTS/QuTS hero/QuTScloud 目录遍历Network Attached Storage SoftwareNot DefinedOfficial Fix0.000500.03CVE-2023-45026
2024-02-029.08.8QNAP QTS/QuTS hero/QuTScloud 权限升级Network Attached Storage SoftwareNot DefinedOfficial Fix0.000670.04CVE-2023-45025
2024-02-025.25.2QNAP QTS/QuTS hero/QuTScloud 内存损坏Network Attached Storage SoftwareNot DefinedOfficial Fix0.000550.06CVE-2023-41292
2024-02-025.85.7QNAP QTS/QuTS hero/QuTScloud 权限升级Network Attached Storage SoftwareNot DefinedOfficial Fix0.000470.02CVE-2023-41283
2024-02-025.85.7QNAP QTS/QuTS hero/QuTScloud 权限升级Network Attached Storage SoftwareNot DefinedOfficial Fix0.000470.02CVE-2023-41282
2024-02-025.85.7QNAP QTS/QuTS hero/QuTScloud 权限升级Network Attached Storage SoftwareNot DefinedOfficial Fix0.000470.02CVE-2023-41281
2024-02-025.85.7QNAP QTS/QuTS hero/QuTScloud 内存损坏Network Attached Storage SoftwareNot DefinedOfficial Fix0.000530.02CVE-2023-41280
2024-02-025.85.7QNAP QTS/QuTS hero/QuTScloud 内存损坏Network Attached Storage SoftwareNot DefinedOfficial Fix0.000530.02CVE-2023-41279
2024-02-025.85.7QNAP QTS/QuTS hero/QuTScloud 内存损坏Network Attached Storage SoftwareNot DefinedOfficial Fix0.000530.02CVE-2023-41278
2024-02-025.85.7QNAP QTS/QuTS hero/QuTScloud 内存损坏Network Attached Storage SoftwareNot DefinedOfficial Fix0.000530.05CVE-2023-41277
2024-02-025.55.5QNAP QTS/QuTS hero/QuTScloud 内存损坏Network Attached Storage SoftwareNot DefinedOfficial Fix0.000550.03CVE-2023-41276
2024-02-025.85.7QNAP QTS/QuTS hero/QuTScloud 内存损坏Network Attached Storage SoftwareNot DefinedOfficial Fix0.000550.02CVE-2023-41275
2024-02-024.44.3QNAP QTS/QuTS hero/QuTScloud 拒绝服务Network Attached Storage SoftwareNot DefinedOfficial Fix0.000440.02CVE-2023-41274
2024-02-025.55.5QNAP QTS/QuTS hero/QuTScloud 内存损坏Network Attached Storage SoftwareNot DefinedOfficial Fix0.000550.02CVE-2023-41273

255 更多条目未显示

Want to stay up to date on a daily basis?

Enable the mail alert feature now!