CVE-2023-34980

MEDIUM Year: 2023
CVSS v3 Score
5.9
Medium
Weakness Type
CWE-78
View all →

Vulnerability Description

An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute commands via a network. We have already fixed the vulnerability in the following versions: QTS 4.5.4.2627 build 20231225 and later QuTS hero h4.5.4.2626 build 20231225 and later

Related Vulnerabilities

CVE-2022-22454

MEDIUM
CVSS:5.9(Medium)

IBM InfoSphere Information Server 11.7 could allow a locally authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request.

CWE-782022

CVE-2023-51699

MEDIUM
CVSS:6.0(Medium)

Fluid is an open source Kubernetes-native Distributed Dataset Orchestrator and Accelerator for data-intensive applications. An OS command injection vulnerability within the Fluid project's JuicefsRunt...

CWE-782023

CVE-2024-20461

MEDIUM
CVSS:6.0(Medium)

A vulnerability in the CLI of Cisco ATA 190 Series Analog Telephone Adapter firmware could allow an authenticated, local attacker with high privileges to execute arbitrary commands as the root us...

CWE-782024

CVE-2025-27079

MEDIUM
CVSS:6.0(Medium)

A vulnerability in the file creation process on the command line interface of AOS-8 Instant and AOS-10 AP could allow an authenticated remote attacker to perform remote code execution (RCE). Successfu...

CWE-782025

CVE-2023-50358

MEDIUM
CVSS:5.8(Medium)

An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to execute commands via a network. We have a...

CWE-782023

CVE-2022-0764

MEDIUM
CVSS:6.1(Medium)

Arbitrary Command Injection in GitHub repository strapi/strapi prior to 4.1.0.

CWE-782022