CVE-2023-39300

QTS

HIGH

7.2

CVSS Score

Published: September 6, 2024 at 04:27 PM UTC

Updated: June 17, 2026 at 06:11 AM UTC

1 product affected across 1 vendorQTS

Using QTS by QNAP Systems Inc.?

Get instant alerts when new vulnerabilities affect QTS - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

HIGH7.2

Exploit prediction

EPSS 1%

SSVC

No known exploit

Description

An OS command injection vulnerability has been reported to affect legacy QTS. If exploited, the vulnerability could allow authenticated administrators to execute commands via a network. We have already fixed the vulnerability in the following versions: QTS 4.3.6.2805 build 20240619 and later QTS 4.3.4.2814 build 20240618 and later QTS 4.3.3.2784 build 20240619 and later QTS 4.2.6 build 20240618 and later

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

QTS · Qnap

95%

4.2.6 ≤ v < 4.2.6 build 202406184.2.6 ≤ v < 4.2.6_build_202406184.3.3 ≤ v < 4.3.3.2784 build 202406194.3.3 ≤ v < 4.3.3.2784_build_202406194.3.4 ≤ v < 4.3.4.2814 build 202406184.3.4 ≤ v < 4.3.4.2814_build_202406184.3.6 ≤ v < 4.3.6.2805 build 202406194.3.6 ≤ v < 4.3.6.2805_build_202406194.2.6 4.2.6 build_20170517 4.2.6 build_20190322 4.2.6 build_20190730 4.2.6 build_20190921 4.2.6 build_20191107 4.2.6 build_20200109 4.2.6 build_20200421 4.2.6 build_20200611 4.2.6 build_20200821 4.2.6 build_20210327 4.2.6 build_20211215 4.2.6 build_20220304 4.2.6 build_20220623 4.2.6 build_20221028 4.2.6 build_20230621 4.2.6 build_20240131 4.3.3 4.3.3.0174 build_20170503 4.3.3.0868 build_20190322 4.3.3.0998 build_20190730 4.3.3.1051 build_20190921 4.3.3.1098 build_20191107 4.3.3.1161 build_20200109 4.3.3.1252 build_20200409 4.3.3.1315 build_20200611 4.3.3.1386 build_20200821 4.3.3.1432 build_20201006 4.3.3.1624 build_20210416 4.3.3.1677 build_20210608 4.3.3.1693 build_20210624 4.3.3.1799 build_20211008 4.3.3.1864 build_20211212 4.3.3.1945 build_20220303 4.3.3.2057 build_20220623 4.3.3.2211 build_20221124 4.3.3.2420 build_20230621 4.3.3.2644 build_20240131 4.3.4 4.3.4.0899 build_20190322 4.3.4.1029 build_20190730 4.3.4.1082 build_20190921 4.3.4.1190 build_20200107 4.3.4.1282 build_20200408 4.3.4.1368 build_20200703 4.3.4.1417 build_20200821 4.3.4.1463 build_20201006 4.3.4.1632 build_20210324 4.3.4.1652 build_20210413 4.3.4.1976 build_20220303 4.3.4.2107 build_20220712 4.3.4.2242 build_20221124 4.3.4.2451 build_20230621 4.3.4.2675 build_20240131 4.3.6 4.3.6.0895 build_20190328 4.3.6.0907 build_20190409 4.3.6.0923 build_20190425 4.3.6.0944 build_20190516 4.3.6.0959 build_20190531 4.3.6.0979 build_20190620 4.3.6.0993 build_20190704 4.3.6.1013 build_20190724 4.3.6.1033 build_20190813 4.3.6.1070 build_20190919 4.3.6.1154 build_20191212 4.3.6.1218 build_20200214 4.3.6.1263 build_20200330 4.3.6.1286 build_20200422 4.3.6.1333 build_20200608 4.3.6.1411 build_20200825 4.3.6.1446 build_20200929 4.3.6.1620 build_20210322 4.3.6.1663 build_20210504 4.3.6.1711 build_20210621 4.3.6.1750 build_20210730 4.3.6.1831 build_20211019 4.3.6.1907 build_20220103 4.3.6.1965 build_20220302 4.3.6.2050 build_20220526 4.3.6.2232 build_20221124 4.3.6.2441 build_20230621 4.3.6.2665 build_20240131

Affected range stops below 4.2.6 build 20240618, so it looks safe — our inference, not a vendor statement

Affected range stops below 4.3.3.2784 build 20240619, so it looks safe — our inference, not a vendor statement

Affected range stops below 4.3.4.2814 build 20240618, so it looks safe — our inference, not a vendor statement

Affected range stops below 4.3.6.2805 build 20240619, so it looks safe — our inference, not a vendor statement

Vendor states this is fixed in 4.5.x (unaffected)

Vendor states this is fixed in 5.x (unaffected)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

https://www.qnap.com/en/security-advisory/qsa-24-26

References (1)

Vendor Advisory

Source: [email protected]

https://www.qnap.com/en/security-advisory/qsa-24-26

SSVC — Action Prioritization

SSVCNo known exploitNot automatableTotal impact

SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.

CVSS

7.2HIGHqnap

Attack Vector: NETWORK
Complexity: LOW
Privileges: HIGH
User Interaction: NONE
Scope: UNCHANGED
Confidentiality: HIGH
Integrity: HIGH
Availability: HIGH

Vector?

Quick Info

StatusANALYZED

CWE

CWE-78

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create account Sign in

Free plan, no card