QNAP Qufirewall vulnerabilities

3 CVEs affecting QNAP Qufirewall, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-23356, published 2024-12-19.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2023-23356, published 2024-12-19. High severity, CVSS 7.2. EPSS: 0.9% chance of exploitation in the next 30 days. A command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access…
CVE-2023-41290, published 2024-04-26. Medium severity, CVSS 4.9. EPSS: 0.5% chance of exploitation in the next 30 days. A path traversal vulnerability has been reported to affect QuFirewall. If exploited, the vulnerability could allow authenticated administrators to read the contents of unexpected files and expose…
CVE-2023-41291, published 2024-04-26. Medium severity, CVSS 4.9. EPSS: 0.4% chance of exploitation in the next 30 days. A path traversal vulnerability has been reported to affect QuFirewall. If exploited, the vulnerability could allow authenticated administrators to read the contents of unexpected files and expose…