CVSS 3.1 Score 5.0 of 10 (medium)


Published Feb 2, 2024
Updated: Feb 8, 2024
CWE ID 285
CWE ID 863


CVE-2023-32967 is an incorrect authorization vulnerability that affects several QNAP operating system versions. This vulnerability allows authenticated users to bypass access restrictions via a network. However, it does not affect QTS 5.x and QuTS hero. The vulnerability has been fixed in QuTScloud c5.1.5.2651 and later, as well as QTS build 20231225 and later versions. The base severity of this vulnerability is rated as MEDIUM, with a base score of 5.0, indicating a potential danger to organizations.

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2023-32967 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options