Your Cart Is Empty
✖No products in the cart.
To embark on a cyber journey, here are the main cyber waypoints:
– QNAP issued security updates to fix two critical security glitches in its operating system.
– CVE-2023-23368 (with a concerning CVSS score of 9.8) is a command injection bug impacting QTS, QuTS hero, and QuTScloud.
– If taken advantage of, remote attackers could execute instructions over a network.
In the digital world, maintaining strong walls is critical, and this week, QNAP has been busy reinforcing its own. The company released security patches to correct two significant security flaws embedded in its operating system. Think of these flaws like a suddenly open window in your Fort Knox – not exactly ideal!
No one likes bugs, especially not the sort that are high-risk and techie. The nasty critter we’re discussing right now is labeled CVE-2023-23368, with a CVSS score of 9.8. In terms of disastrous, it’s the equivalent of dropping your smartphone down the toilet. This command injection bug affects QTS, QuTS hero, and QuTScloud. When confronted with such bugs, there’s only one thing to do – call the exterminators, or in this case, the coders!
“Mirror, mirror on the wall, who’s the riskiest of them all?” Privacy Breach might be your guess. But in this story, it’s network-borne attackers. If this vulnerability is exploited, it could let remote attackers play around with commands over a network. Not exactly a fun party trick for the rest of us.
In a tale of tech hygiene, QNAP released fixes for two critical security issues within its operating system. The bigger of the two bad boys, a command injection bug tagged as CVE-2023-23368, holds a killer CVSS score of 9.8 and impacts QTS, QuTS hero, and QuTScloud. To avoid having any gatecrashers execute instructions remotely over a network, updates have been issued. So, like a diligent QNAP user, ensure you nip any potential problems in the bud and apply the fixes, before you have to let the “bit”-keeper in!
Original Article: https://thehackernews.com/2023/11/qnap-releases-patch-for-2-critical.html
No products in the cart.