Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
QTS, QuTS hero
Vulnerability Description
A command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to execute arbitrary commands. We have already fixed the vulnerability in the following versions: QTS 5.2.3.3006 build 20250108 and later QuTS hero h5.2.3.3006 build 20250108 and later
CVSS Information
N/A
Vulnerability Type
在命令中使用的特殊元素转义处理不恰当(命令注入)
Vulnerability Title
QNAP Systems QTS和QNAP Systems QuTS hero 操作系统命令注入漏洞
Vulnerability Description
QNAP Systems QTS和QNAP Systems QuTS hero都是中国威联通科技（QNAP Systems）公司的产品。QNAP Systems QTS是一个入门操作系统。QNAP Systems QuTS hero是一个操作系统。 QNAP Systems QTS 5.2.3.3006 build 20250108之前版本和QNAP Systems QuTS hero h5.2.3.3006 build 20250108之前版本存在操作系统命令注入漏洞，该漏洞源于命令注入，可能导致远程攻
CVSS Information
N/A
Vulnerability Type
N/A