Headline

CVE-2023-23371: Vulnerability in QVPN Device Client for Windows - Security Advisory

A cleartext transmission of sensitive information vulnerability has been reported to affect QVPN Device Client. If exploited, the vulnerability could allow local authenticated administrators to read sensitive data via unspecified vectors.

We have already fixed the vulnerability in the following version: QVPN Windows 2.2.0.0823 and later

1 year ago

CVE

Open in Source

#vulnerability #windows #js #auth

Security ID : QSA-23-39

Release date : October 7, 2023
CVE identifier : CVE-2023-23371
Affected products: QVPN Windows 2.2.x

Summary

A cleartext transmission of sensitive information vulnerability has been reported to affect QVPN Device Client for Windows. If exploited, the vulnerability could allow local authenticated administrators to read sensitive data via unspecified vectors.

We have already fixed the vulnerability in the following version:

Affected Product

Fixed Version

QVPN Windows 2.2.x

QVPN Windows 2.2.0.0823 and later

Recommendation

To secure your device, we recommend regularly updating your QNAP utilities to the latest versions to benefit from vulnerability fixes. You can check the QNAP Utilities page to see the latest updates available for your device operating system.

Attachment