CVE-2023-39300

An OS command injection vulnerability has been reported to affect legacy QTS. If exploited, the vulnerability could allow authenticated administrators to execute commands via a network. We have already fixed the vulnerability in the following versions: QTS 4.3.6.2805 build 20240619 and later QTS 4.3.4.2814 build 20240618 and later QTS 4.3.3.2784 build 20240619 and later QTS 4.2.6 build 20240618 and later

• qnap qts 4.3.6.0895 • qnap qts 4.3.6.0907 • qnap qts 4.3.6.0923 • qnap qts 4.3.6.0944 • qnap qts 4.3.6.0959 • qnap qts 4.3.6.0979 • qnap qts 4.3.6.0993 • qnap qts 4.3.6.1013 • qnap qts 4.3.6.1033 • qnap qts 4.3.6.1070 • qnap qts 4.3.6.1154 • qnap qts 4.3.6.1218 • qnap qts 4.3.6.1263 • qnap qts 4.3.6.1286 • qnap qts 4.3.6.1333 • qnap qts 4.3.6.1411 • qnap qts 4.3.6.1446 • qnap qts 4.3.6.1620 • qnap qts 4.3.6.1663 • qnap qts 4.3.6.1711 • qnap qts 4.3.6.1750 • qnap qts 4.3.6.1831 • qnap qts 4.3.6.1907 • qnap qts 4.3.6.1965 • qnap qts 4.3.6.2050 • qnap qts 4.3.6.2232 • qnap qts 4.3.6.2441 • qnap qts 4.3.6.2665 • qnap qts 4.3.4.0899 • qnap qts 4.3.4.1029 • qnap qts 4.3.4.1082 • qnap qts 4.3.4.1190 • qnap qts 4.3.4.1282 • qnap qts 4.3.4.1368 • qnap qts 4.3.4.1417 • qnap qts 4.3.4.1463 • qnap qts 4.3.4.1632 • qnap qts 4.3.4.1652 • qnap qts 4.3.4.1976 • qnap qts 4.3.4.2107 • qnap qts 4.3.4.2242 • qnap qts 4.3.4.2451 • qnap qts 4.3.4.2675 • qnap qts 4.3.3.0174 • qnap qts 4.3.3.0868 • qnap qts 4.3.3.0998 • qnap qts 4.3.3.1051 • qnap qts 4.3.3.1098 • qnap qts 4.3.3.1161 • qnap qts 4.3.3.1252 • qnap qts 4.3.3.1315 • qnap qts 4.3.3.1386 • qnap qts 4.3.3.1432 • qnap qts 4.3.3.1624 • qnap qts 4.3.3.1677 • qnap qts 4.3.3.1693 • qnap qts 4.3.3.1799 • qnap qts 4.3.3.1864 • qnap qts 4.3.3.1945 • qnap qts 4.3.3.2057 … and 4 more