CVE-2023-47564

Summary

An incorrect permission assignment for critical resource vulnerability has been reported to affect Qsync Central. If exploited, the vulnerability could allow authenticated users to read or modify the resource via a network.

We have already fixed the vulnerability in the following versions: Qsync Central 4.4.0.15 ( 2024/01/04 ) and later Qsync Central 4.3.0.11 ( 2024/01/11 ) and later

Affected Software

VendorProductVersion RangeStatus
QNAP Systems Inc.Qsync Central4.4.x.x < 4.4.0.15 ( 2024/01/04 )affected
QNAP Systems Inc.Qsync Central4.3.x.x < 4.3.0.11 ( 2024/01/11 )affected

Weaknesses

  • CWE-732: CWE-732

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: total

References