CVE-2023-41273
CVE-2023-41273 is a medium-severity vulnerability in Qnap Qts with a CVSS 3.x base score of 5.5. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-787.
Key facts
- Severity: Medium (CVSS 3.x base score 5.5)
- EPSS exploit prediction: 1% (42nd percentile)
- Actively exploited: Not listed in CISA KEV
- EU (EUVD) id: EUVD-2023-45789
- Weakness: CWE-787
- Affected product: Qnap Qts
- Published:
- Last modified:
Description
A heap-based buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute code via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.2.2533 build 20230926 and later QuTS hero h5.1.2.2534 build 20230927 and later QuTScloud c5.1.5.2651 and later
Frequently asked questions
- What is CVE-2023-41273?
- A heap-based buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute code via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.2.2533 build 20230926 and later QuTS hero h5.1.2.2534 build 20230927 and later QuTScloud c5.1.5.2651 and later
- How severe is CVE-2023-41273?
- CVE-2023-41273 has a CVSS 3.x base score of 5.5, rated medium severity. It is exploitable over network with low attack complexity, requires high privileges and no user interaction. Impact on confidentiality is none, integrity low, and availability low.
- Is CVE-2023-41273 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (42nd percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2023-41273?
- CVE-2023-41273 primarily affects Qnap Qts. In total, 14 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
- How do I fix CVE-2023-41273?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
- Does CVE-2023-41273 have an EU (EUVD) identifier?
- Yes. CVE-2023-41273 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2023-45789.
- When was CVE-2023-41273 published?
- CVE-2023-41273 was published on 2024-02-02 and last updated on 2026-06-17.
References
Affected products (14)
- cpe:2.3:o:qnap:qts:5.1.0.2348:build_20230325:*:*:*:*:*:*
- cpe:2.3:o:qnap:qts:5.1.0.2399:build_20230515:*:*:*:*:*:*
- cpe:2.3:o:qnap:qts:5.1.0.2418:build_20230603:*:*:*:*:*:*
- cpe:2.3:o:qnap:qts:5.1.0.2444:build_20230629:*:*:*:*:*:*
- cpe:2.3:o:qnap:qts:5.1.0.2466:build_20230721:*:*:*:*:*:*
- cpe:2.3:o:qnap:qts:5.1.1.2491:build_20230815:*:*:*:*:*:*
- cpe:2.3:o:qnap:qts:5.1.2.2533:-:*:*:*:*:*:*
- cpe:2.3:o:qnap:quts_hero:h5.1.0.2409:build_20230525:*:*:*:*:*:*
- cpe:2.3:o:qnap:quts_hero:h5.1.0.2424:build_20230609:*:*:*:*:*:*
- cpe:2.3:o:qnap:quts_hero:h5.1.0.2453:build_20230708:*:*:*:*:*:*
- cpe:2.3:o:qnap:quts_hero:h5.1.0.2466:build_20230721:*:*:*:*:*:*
- cpe:2.3:o:qnap:quts_hero:h5.1.1.2488:build_20230812:*:*:*:*:*:*
- cpe:2.3:o:qnap:quts_hero:h5.1.2.2534:-:*:*:*:*:*:*
- cpe:2.3:o:qnap:qutscloud:c5.1.0.2498:build_20230822:*:*:*:*:*:*
More vulnerabilities in Qnap Qts
- CVE-2024-32766 — Critical (CVSS 10.0): An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited,…
- CVE-2017-7876 — Critical (CVSS 10.0): This command injection vulnerability in QTS allows attackers to run arbitrary commands in the compromised application.…
- CVE-2025-66276 — Critical (CVSS 9.8): QuTS hero is not affected. We have already fixed the vulnerability in the following version: QTS 5.2.7.3256 build…
- CVE-2025-66277 — Critical (CVSS 9.8): A link following vulnerability has been reported to affect several QNAP operating system versions. The remote attackers…
- CVE-2025-62849 — Critical (CVSS 9.8): An SQL injection vulnerability has been reported to affect several QNAP operating system versions. The remote attackers…
- CVE-2025-59385 — Critical (CVSS 9.8): An authentication bypass by spoofing vulnerability has been reported to affect several QNAP operating system versions.…
Other CWE-787 (Out-of-bounds Write) vulnerabilities
- CVE-2026-42369 — Critical (CVSS 10.0): GV-VMS V20 is a Video Monitoring Software used to gather the feeds of many surveillance cameras and manage other…
- CVE-2026-4746 — Critical (CVSS 10.0): Out-of-bounds Write vulnerability in timeplus-io proton (base/poco/Foundation/src modules). This vulnerability is…
- CVE-2025-43300 — Critical (CVSS 10.0): An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.8.5 and iPadOS…
- CVE-2025-24201 — Critical (CVSS 10.0): An out-of-bounds write issue was addressed with improved checks to prevent unauthorized actions. This issue is fixed in…
- CVE-2024-42479 — Critical (CVSS 10.0): llama.cpp provides LLM inference in C/C++. The unsafe `data` pointer member in the `rpc_tensor` structure can cause…
- CVE-2024-39791 — Critical (CVSS 10.0): Stack-based buffer overflow vulnerabilities affecting Vonets industrial wifi bridge relays and wifi bridge…