CVE-2023-34972
CVSS 3.1 Score 6.5 of 10 (medium)
Details
Published Aug 24, 2023
Updated: Aug 31, 2023
CWE ID 319
Summary
CVE-2023-34972 is a vulnerability affecting QNAP operating systems that allows local network clients to potentially access sensitive data in cleartext. The precise attack vectors are unspecified, but the impact could be significant if exploited. QNAP has released patches for this issue in QTS 5.0.1.2425 and later, QTS 5.1.0.2444 and later, and QuTS hero h5.1.0.2424 and later. It is strongly recommended that users update their systems to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share
Affected Products
- QNAP QTS
Affected Vendors
- QNAP Systems