CVE-2023-39301

A server-side request forgery (SSRF) vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users to read application data via a network. We have already fixed the vulnerability in the following versions: QTS 5.0.1.2514 build 20230906 and later QTS 5.1.1.2491 build 20230815 and later QuTS hero h5.0.1.2515 build 20230907 and later QuTS hero h5.1.1.2488 build 20230812 and later QuTScloud c5.1.0.2498 and later

CVSS v3 4.3 MEDIUM

4.3^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.8 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://www.qnap.com/en/security-advisory/qsa-23-51	Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:o:qnap:qts:*:*:*:*:*:*:*:*

Configuration 2 (hide)

cpe:2.3:o:qnap:qts:*:*:*:*:*:*:*:*

Configuration 3 (hide)

cpe:2.3:o:qnap:quts_hero:*:*:*:*:*:*:*:*

Configuration 4 (hide)

cpe:2.3:o:qnap:quts_hero:*:*:*:*:*:*:*:*

Configuration 5 (hide)

cpe:2.3:o:qnap:qutscloud:*:*:*:*:*:*:*:*

History

14 Nov 2023, 15:29

Type	Values Removed	Values Added
References	~~(MISC) https://www.qnap.com/en/security-advisory/qsa-23-51 -~~	(MISC) https://www.qnap.com/en/security-advisory/qsa-23-51 - Vendor Advisory
CVSS	v2 : ~~unknown~~ v3 : ~~unknown~~	v2 : unknown v3 : 4.3
CPE		cpe:2.3:o:qnap:quts_hero:::::::: cpe:2.3:o:qnap:qutscloud:::::::: cpe:2.3:o:qnap:qts::::::::
First Time		Qnap Qnap qts Qnap qutscloud Qnap quts Hero

03 Nov 2023, 17:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2023-11-03 17:15

Updated : 2023-12-10 15:14

NVD link : CVE-2023-39301

Mitre link : CVE-2023-39301

CVE.ORG link : CVE-2023-39301

JSON object : View

Products Affected

qnap

qts
quts_hero
qutscloud

CWE

CWE-918

Server-Side Request Forgery (SSRF)

{"id": "CVE-2023-39301", "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}, "impactScore": 1.4, "exploitabilityScore": 2.8}, {"type": "Secondary", "source": "security@qnapsecurity.com.tw", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}, "impactScore": 1.4, "exploitabilityScore": 2.8}]}, "published": "2023-11-03T17:15:08.987", "references": [{"url": "https://www.qnap.com/en/security-advisory/qsa-23-51", "tags": ["Vendor Advisory"], "source": "security@qnapsecurity.com.tw"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "security@qnapsecurity.com.tw", "description": [{"lang": "en", "value": "CWE-918"}]}], "descriptions": [{"lang": "en", "value": "A server-side request forgery (SSRF) vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users to read application data via a network.\n\nWe have already fixed the vulnerability in the following versions:\nQTS 5.0.1.2514 build 20230906 and later\nQTS 5.1.1.2491 build 20230815 and later\nQuTS hero h5.0.1.2515 build 20230907 and later\nQuTS hero h5.1.1.2488 build 20230812 and later\nQuTScloud c5.1.0.2498 and later\n"}, {"lang": "es", "value": "Se ha informado que una vulnerabilidad de Server-Side Request Forgery (SSRF) afecta a varias versiones del sistema operativo QNAP. Si se explota, la vulnerabilidad podr\u00eda permitir a los usuarios autenticados leer datos de aplicaciones a trav\u00e9s de una red. Ya hemos solucionado la vulnerabilidad en las siguientes versiones: QTS 5.0.1.2514 compilaci\u00f3n 20230906 y posteriores QTS 5.1.1.2491 compilaci\u00f3n 20230815 y posteriores QuTS hero h5.0.1.2515 compilaci\u00f3n 20230907 y posteriores QuTS hero h5.1.1.2488 compilaci\u00f3n 20230812 y posteriores QuTScloud c5.1.0.2498 y posteriores"}], "lastModified": "2023-11-14T15:29:43.047", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:qnap:qts:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FE4E63EE-19E3-4A18-B22C-8E5A178643E6", "versionEndExcluding": "5.1.1.2491"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:qnap:qts:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2B2C011A-E432-4F18-8661-E51F3A1E969A", "versionEndExcluding": "5.0.1.2514"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:qnap:quts_hero:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FC1722B6-35FA-4544-B22F-257DE9A7B9CF", "versionEndExcluding": "h5.1.1.2488"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:qnap:quts_hero:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F2CBD911-61F2-4248-9918-67A34E049686", "versionEndExcluding": "h5.0.1.2515"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:qnap:qutscloud:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3CDA1932-DFFE-40B4-B8A8-E84914C99601", "versionEndExcluding": "c5.1.0.2498"}], "operator": "OR"}]}], "sourceIdentifier": "security@qnapsecurity.com.tw"}