[중요보안안내] 가짜Qfinder Pro웹사이트가 감지되었습니다. 자세히 알아보기 >

Security ID : QSA-23-39

Vulnerability in QVPN Device Client for Windows


  • Release date : October 7, 2023

  • CVE identifier : CVE-2023-23371

  • Affected products: QVPN Windows 2.2.x

Severity

Low

Status

Resolved


Summary

A cleartext transmission of sensitive information vulnerability has been reported to affect QVPN Device Client for Windows. If exploited, the vulnerability could allow local authenticated administrators to read sensitive data via unspecified vectors.

We have already fixed the vulnerability in the following version:

Affected Product Fixed Version
QVPN Windows 2.2.x QVPN Windows 2.2.0.0823 and later

Recommendation

To secure your device, we recommend regularly updating your QNAP utilities to the latest versions to benefit from vulnerability fixes. You can check the QNAP Utilities page to see the latest updates available for your device operating system.

Attachment

Acknowledgements: Runzi Zhao, Security Researcher, QI-ANXIN

Revision History:
V1.0 (October 07, 2023) - Published

사양 선택

      더 보기 적게 보기
      다른 국가/지역 사이트:
      open menu
      back to top