CVE-2023-51365

Deeper analysis

A path traversal vulnerability tracked as CVE-2023-51365 affects multiple versions of QNAP QTS, QuTS hero, and QuTScloud operating systems. The flaw, assigned CWE-22, permits unauthorized reading of file contents outside intended directories, potentially exposing sensitive data over the network. It carries a CVSS 3.1 score of 8.7 reflecting network attack vector, high complexity, no required privileges or user interaction, and impacts to integrity and availability with changed scope.

An unauthenticated remote attacker can exploit the issue by supplying crafted path sequences in network requests to read arbitrary files on the affected NAS device. Successful exploitation could allow disclosure of configuration files, credentials, or other sensitive information without authentication, though the high attack complexity noted in the CVSS vector indicates non-trivial conditions must be met.

QNAP has addressed the vulnerability in QTS 5.1.4.2596 build 20231128 and later, QTS 4.5.4.2627 build 20231225 and later, QuTS hero h5.1.3.2578 build 20231110 and later, QuTS hero h4.5.4.2626 build 20231225 and later, and QuTScloud c5.1.5.2651 and later, as detailed in security advisory QSA-24-14. The current EPSS score of 0.1217 shows no material increase from a lower baseline.