CVE-2023-47564

published 2024-02-02

CVE-2023-47564: An incorrect permission assignment for critical resource vulnerability has been reported to affect Qsync Central. If exploited, the vulnerability could allow…

Priority P3 50 high 8.1 CVSS 3.1

AV N AC L PR L UI N S U C H I H A N

An incorrect permission assignment for critical resource vulnerability has been reported to affect Qsync Central. If exploited, the vulnerability could allow authenticated users to read or modify the resource via a network.

We have already fixed the vulnerability in the following versions:
Qsync Central 4.4.0.15 ( 2024/01/04 ) and later
Qsync Central 4.3.0.11 ( 2024/01/11 ) and later

Affected

4 ranges

Vendor	Product	Version range	Fixed in
qnap	qsync_central	>= 4.3.0.0 < 4.3.0.11	4.3.0.11
qnap	qsync_central	>= 4.4.0.0 < 4.4.0.15	4.4.0.15
qnap_systems_inc	qsync_central	>= 4.3.x.x < 4.3.0.11 ( 2024/01/11 )	4.3.0.11 ( 2024/01/11 )
qnap_systems_inc	qsync_central	>= 4.4.x.x < 4.4.0.15 ( 2024/01/04 )	4.4.0.15 ( 2024/01/04 )

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-732