CVE-2023-34971
HighCVSS 7.1Exploitation Probability (EPSS)
Low risk1th percentile - higher than 1% of all known CVEs
Summary
A vulnerability related to inadequate encryption strength has been reported to affect QNAP operating systems. If exploited, local network clients may decrypt data using brute force attacks via unspecified vectors.
Risk Assessment
This vulnerability could lead to the exposure of sensitive data on the local network, posing a serious security threat to the organization.
Recommendation
It is recommended to update QNAP operating systems to versions that include fixes for this vulnerability.
Other vulnerabilities in Systemy operacyjne QNAP
See all- CVE-2023-34973Low
An insufficient entropy vulnerability has been reported to affect QNAP operating systems. If exploited, the vulnerability possibly allows remote users to predict secret via unspecified vectors.
- CVE-2023-34972Low
A vulnerability has been reported affecting QNAP operating systems regarding the cleartext transmission of sensitive information. If exploited, local network clients may read unexpected sensitive data via unspecified vectors.
Original NVD description (English source)
An inadequate encryption strength vulnerability has been reported to affect QNAP operating systems. If exploited, the vulnerability possibly allows local network clients to decrypt the data using brute force attacks via unspecified vectors. We have already fixed the vulnerability in the following versions: QTS 5.0.1.2425 build 20230609 and later QTS 5.1.0.2444 build 20230629 and later QTS 4.5.4.2467 build 20230718 and later QuTS hero h5.1.0.2424 build 20230609 and later QuTS hero h4.5.4.2476 build 20230728 and later