QNAP Systems Inc. Qufirewall vulnerabilities

3 vulnerabilities

Known vulnerabilities in QNAP Systems Inc. Qufirewall, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

5.5CVE-2023-41291qnap systems inc.qufirewall+1
EPSS score
0.45%
A path traversal vulnerability has been reported to affect QuFirewall. If exploited, the vulnerability could allow authenticated administrators to read the contents of unexpected files and expose sensitive data via a network. We have already fixed the vulnerability in the following version: QuFirewall 2.4.1 ( 2024/02/01 ) and later4.9CVE-2023-41290qnap systems inc.qufirewall+1
EPSS score
0.46%
A path traversal vulnerability has been reported to affect QuFirewall. If exploited, the vulnerability could allow authenticated administrators to read the contents of unexpected files and expose sensitive data via a network. We have already fixed the vulnerability in the following version: QuFirewall 2.4.1 ( 2024/02/01 ) and later7.2CVE-2023-23356qnap systems inc.qufirewall+1
EPSS score
0.94%
A command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to execute arbitrary commands. We have already fixed the vulnerability in the following versions: QuFirewall 2.3.3 ( 2023/03/27 ) and later and later