Known vulnerabilities in QuFirewall
Vendor:
QNAP Systems, Inc.
Software:
QuFirewall
Software CPE:
cpe:2.3:a:qnap_systems:qufirewall:*:*:*:*:*:*:*:*
Website:
https://www.qnap.com
Total vulnerabilities:
3
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
8.7
Breakdown by Severity Chart
Vulnerabilities (3)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU89042 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2023-41291 |
CWE-22 | Low | 2.4.1 | 29.04.2024 |
SB2024042920 |
||
| #VU89041 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2023-41290 |
CWE-22 | Low | 2.4.1 | 29.04.2024 |
SB2024042920 |
||
| #VU80560 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2023-23356 |
CWE-78 | Low | 2.3.3 | 08.09.2023 |
SB2023090829 |