CVE-2023-39296

CVSS 3.1 Score 7.5 of 10 (high)

Details

Published Jan 5, 2024

Updated: Jan 11, 2024

CWE ID 1321

Summary

CVE-2023-39296 is a prototype pollution vulnerability that affects several QNAP operating system versions. This issue enables users to override existing attributes with incompatible types, potentially leading to a network crash. The vulnerability has been addressed in QTS 5.1.3.2578 build 20231110 and later, as well as in QuTS hero h5.1.3.2578 build 20231110 and later.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

QNAP QTS

Affected Vendors

QNAP Systems

Advisories, Assessments, and Mitigations

https://app.recordedfuture.com/live/sc/entity/sIatAi
https://www.cve.org/CVERecord?id=CVE-2023-39296
https://nvd.nist.gov/vuln/detail/CVE-2023-39296

Back to Vulnerability Database