Skip to content
Fencer Vulns
medium 6.6

CVE-2023-23355 json

QTS, QuTS hero, QuTScloud, QVP (QVR Pro appliances), QVR

published 2023-03-29 3 y ago modified 2026-06-17 4 mo ago also EUVD-2023-27455

cvss
6.6
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
1.2%
EPSS 1.2% chance of exploitation in 30 days, percentile 69%
public exploits
0
none known

Summary

An OS command injection vulnerability has been reported to affect QNAP operating systems. If exploited, the vulnerability possibly allows remote authenticated administrators to execute commands via unspecified vectors. QES is not affected.

We have already fixed the vulnerability in the following versions: QTS 5.0.1.2346 build 20230322 and later QTS 4.5.4.2374 build 20230416 and later QuTS hero h5.0.1.2348 build 20230324 and later QuTS hero h4.5.4.2374 build 20230417 and later QuTScloud c5.0.1.2374 and later

Patch / fix

  • QNAP Systems Inc. QTS 4.5.4.2374 build 20230416, 5.0.1.2346 build 20230322
  • QNAP Systems Inc. QuTS hero h4.5.4.2374 build 20230417, h5.0.1.2348 build 20230324
  • QNAP Systems Inc. QuTScloud c5.0.1.2374

CISA SSVC

Exploitation
none
Automatable
no
Technical impact
partial
Assessed
20 mo ago

Exploit prediction

1.23% chance of exploitation in the next 30 days, higher than 69% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
CNA 3.1 6.6 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L
NVD 3.1 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Affected products

  • QNAP Systems Inc. QTS
  • QNAP Systems Inc. QuTS hero
  • QNAP Systems Inc. QuTScloud
  • QNAP Systems Inc. QES

Classification

Weakness
  • CWE-77 Improper Neutralization of Special Elements used in a Command
  • CWE-78 Improper Neutralization of Special Elements used in an OS Command

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.