Skip to content
OpenAdvisories
High WID-SEC-2024-1195 5 CVEs

QNAP NAS: Mehrere Schwachstellen

Published May 20, 2024 · Updated May 21, 2024 · Revision 2 · de-DE

Vendor: QNAP Systems Product: NAS

Summary

Ein entfernter, authentifizierter Angreifer kann mehrere Schwachstellen in QNAP NAS ausnutzen, um Dateien zu manipulieren, beliebigen Code auszuführen oder Cross-Site Scripting Angriffe durchzuführen.

Product

QNAP ist ein Hersteller von NAS (Network Attached Storage) Lösungen.

Vulnerabilities 5

  • High 7.2
    CVE-2024-27127

    QTS, QuTS hero

    A double free vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users to execute arbitrary code via a network. We have already fixed the vulnerability in the following v…

    QNAP Systems QTS QuTS hero
  • High 7.2
    CVE-2024-27130 Public exploit EPSS 38%

    QTS, QuTS hero

    A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to execute code via a network. We have already fixed the vulnerability in the foll…

    QNAP Systems QTS QuTS hero
  • Medium 6.4
    CVE-2024-21902

    QTS, QuTS hero

    An incorrect permission assignment for critical resource vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users to read or modify the resource via a network. We have al…

    QNAP Systems QTS QuTS hero
  • Medium 6.4
    CVE-2024-27128

    QTS, QuTS hero

    A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users to execute code via a network. We have already fixed the vulnerabili…

    QNAP Systems QTS QuTS hero
  • Medium 6.4
    CVE-2024-27129

    QTS, QuTS hero

    A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users to execute code via a network. We have already fixed the vulnerabili…

    QNAP Systems QTS QuTS hero

Revision history

  1. #2

    Neue Updates von QNAP aufgenommen

  2. #1

    Initiale Fassung

References