Known vulnerabilities in QuTS hero h5.0.1.2376 build 20230421
Vendor:
QNAP Systems, Inc.
Software:
QuTS hero
Version:
h5.0.1.2376 build 20230421
Software CPE:
cpe:2.3:h:qnap_systems:quts-hero:*:*:*:*:*:*:*:*
Website:
https://www.qnap.com
Total vulnerabilities:
5
Public exploits:
4
Known exploited (KEV):
3
Highest CVSSv4 Score:
9.4
Vulnerabilities by Severity
h5.2.9
h5.2.8
h4.5.0.1409 build 20200829
h4.5.0.1352 build 20200703
h4.5.0.1308 build 20200520
h4.5.0.1279 build 20200421
h4.5.4.2956 build 20241119
h4.5.4.2790 build 20240606
h4.5.4.2626 build 20231225
h4.5.4.2476 build 20230728
h4.5.4.2374 build 20230417
h4.5.4.2272 build 20230105
h4.5.4.2217 build 20221111
h4.5.4.2138 build 20220824
h4.5.4.2052 build 20220530
h4.5.4.1991 build 20220330
h4.5.4.1971 build 20220310
h4.5.4.1951 build 20220218
h4.5.4.1892 build 20211223
h4.5.4.1848 build 20211109
h4.5.4.1813 build 20211006
h4.5.4.1800 build 20210923
h4.5.4.1771 build 20210825
h5.0.1.2515 build 20230907
h5.0.1.2376 build 20230421
h5.0.1.2348 build 20230324
h5.0.1.2277 build 20230112
h5.0.1.2269 build 20230104
h5.0.1.2248 build 20221215
h5.0.1.2192 build 20221020
h5.0.1.2045 build 20220526
h5.0.0.2120 build 20220804
h5.0.0.2069 build 20220614
h5.0.0.2022 build 20220428
h5.0.0.1986 build 20220324
h5.0.0.1949 build 20220215
h5.0.0.1900 build 20211228
h5.0.0.1892 build 20211222
h5.0.0.1856 build 20211117
h5.0.0.1844 build 20211105
h5.0.0.1772 build 20210826
h5.2.8.3350 build 20251216
h5.3.2.3354 build 20251225
h5.3.1.3250 build 20250912
h5.2.8.3321 build 20251117
h5.3.1.3292 build 20251024
h5.2.7.3297 build 20251024
h5.2.7.3256 build 20250913
h5.2.6.3195 build 20250715
h5.3.0.3115 build 20250430
h5.2.5.3138 build 20250519
h5.2.4.3079 build 20250321
h5.2.3.3006 build 20250108
h5.2.0.2851 build 20240808
h5.2.2.2952 build 20241116
h5.1.9.2954 build 20241120
h5.2.1.2929 build 20241025
h5.2.0.2782 build 20240601
h5.1.8.2823 build 20240712
h5.1.7.2770 build 20240520
h5.1.6.2734 build 20240414
h5.1.5.2647 build 20240118
h5.1.4.2596 build 20231128
h5.1.3.2578 build 20231110
h5.1.2.2534 build 20230927
h5.1.1.2488 build 20230812
h5.1.0.2392 build 20230508
h5.0.1
h4.5.4
h5.1.0
h5.1.0.2466 build 20230721
h5.1.0.2453 build 20230708
h5.1.0.2424 build 20230609
h5.1.0.2409 build 20230525
h5.0.0.2131 build 20220815
h5.0.0.2069 Build 20220614
h5.0.0.2022 Build 20220428
h4.5.4.1991 Build 20220330
h5.0.0.1986 Build 20220324
h4.5.4.1971 Build 20220310
h4.5.4.1951 Build 20220218
h5.0.0.1949 Build 20220215
-
h4.5.3
h5.0.0.1900 Build 20211228
h4.5.4.1848 Build 20211109
c5.0.0.1919 build 20220119
h5.0.0.1856 Build 20211117
h5.0.0
h5.0.0.1772 Build 20210826
h4.5.3.1710 build 20210624
h4.5.3.1698 build 20210612
h4.5.3.1697 build 20210611
h4.5.2: 1.12.1012
h4.5.2
h4.5.3.1670 build 20210515
h4.5.1
h4.5.2.1638 build 20210414
h4.5.1.1582 build 20210217
h4.5.1.1491 build 20201119
h4.5.1.1472 build 20201031
Vulnerabilities (5)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU130763 - Resource Management Errors CVE-2026-43284 |
CWE-399 | High | - | 08.05.2026 |
SB20260508111 SB20260508120 SB20260508121 and 72 more |
||
| #VU130759 - Resource Management Errors CVE-2026-43500 |
CWE-399 | High | - | 08.05.2026 |
SB20260508108 SB20260508120 SB20260508121 and 32 more |
||
| #VU93513 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') CVE-2024-6387 |
CWE-362 | High | - | 01.07.2024 |
SB2024070144 SB2024070145 SB2024070152 and 89 more |
||
| #VU86371 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2023-50358 |
CWE-78 | High | h4.5.4.2626 build 20231225, h5.1.5.2647 build 20240118 | 13.02.2024 |
SB2024021313 |
||
| #VU86370 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2023-47218 |
CWE-78 | Medium | h4.5.4.2626 build 20231225, h5.1.5.2647 build 20240118 | 13.02.2024 |
SB2024021313 |