CVE-2023-39296

QTS, QuTS hero

HIGH

7.5

CVSS Score

Published: January 5, 2024 at 04:19 PM UTC

Updated: June 17, 2026 at 06:11 AM UTC

2 products affected across 1 vendorQTSQuTS hero

Using QTS by QNAP Systems Inc.?

Get instant alerts when new vulnerabilities affect QTS - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

HIGH7.5

Exploit prediction

EPSS 2%

SSVC

No known exploit

Description

A prototype pollution vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to override existing attributes with ones that have incompatible type, which may lead to a crash via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.3.2578 build 20231110 and later QuTS hero h5.1.3.2578 build 20231110 and later

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

QTS · Qnap

95%

5.1.x ≤ v < 5.1.3.2578 build 202311105.1.0.2348 build_20230325 5.1.0.2399 build_20230515 5.1.0.2418 build_20230603 5.1.0.2444 build_20230629 5.1.0.2466 build_20230721 5.1.1.2491 build_20230815 5.1.2.2533 build_20230926 5.1.x

Affected range stops below 5.1.3.2578 build 20231110, so it looks safe — our inference, not a vendor statement

QuTS hero · Qnap

95%

h5.1.x ≤ v < h5.1.3.2578 build 20231110h5.1.0.2409 build_20230525 h5.1.0.2424 build_20230609 h5.1.0.2453 build_20230708 h5.1.0.2466 build_20230721 h5.1.1.2488 build_20230812 h5.1.2.2534 build_20230927 h5.1.x

Affected range stops below h5.1.3.2578 build 20231110, so it looks safe — our inference, not a vendor statement

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

https://www.qnap.com/en/security-advisory/qsa-23-64

References (1)

Vendor Advisory

Source: [email protected]

https://www.qnap.com/en/security-advisory/qsa-23-64

SSVC — Action Prioritization

SSVCNo known exploitAutomatablePartial impact

SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.

CVSS

7.5HIGHqnap

Attack Vector: NETWORK
Complexity: LOW
Privileges: NONE
User Interaction: NONE
Scope: UNCHANGED
Confidentiality: NONE
Integrity: NONE
Availability: HIGH

Vector?

Quick Info

StatusMODIFIED

CWE

CWE-1321

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create account Sign in

Free plan, no card