Skip to content
OpenAdvisories
High WID-SEC-2025-0506 9 CVEs

QNAP NAS (QuLog Center, QTS, QuTS hero): Mehrere Schwachstellen

Published Mar 9, 2025 · Updated Mar 9, 2025 · de-DE

Vendor: QNAP Systems Product: NAS

Summary

Ein entfernter anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in QNAP NAS ausnutzen, um Informationen preiszugeben, Daten zu verändern, beliebigen Code auszuführen und möglicherweise einen Denial-of-Service-Zustand zu verursachen.

Product

QNAP ist ein Hersteller von NAS (Network Attached Storage) Lösungen.

Vulnerabilities 9

  • High 7.1
    CVE-2024-53693

    QTS, QuTS hero

    An improper neutralization of CRLF sequences ('CRLF Injection') vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained user access to modify application da…

    QNAP Systems QTS QuTS hero
  • Medium 5.3
    CVE-2024-13086

    QTS, QuTS hero

    An exposure of sensitive information vulnerability has been reported to affect product. If exploited, the vulnerability could allow remote attackers to compromise the security of the system. We have already fixed the vulnerability in the following version: QT…

    QNAP Systems QTS QuTS hero
  • Medium 5.1
    CVE-2024-50405

    QTS, QuTS hero

    An improper neutralization of CRLF sequences ('CRLF Injection') vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to modify appli…

    QNAP Systems QTS QuTS hero
  • Medium 5.1
    CVE-2024-53692

    QTS, QuTS hero

    A command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to execute arbitrary commands. We have already fixed the vu…

    QNAP Systems QTS QuTS hero
  • Medium 5.1
    CVE-2024-53696

    QuLog Center

    A server-side request forgery (SSRF) vulnerability has been reported to affect QuLog Center. If exploited, the vulnerability could allow remote attackers who have gained administrator access to read application data. We have already fixed the vulnerability in…

    QNAP Systems QTS QuTS hero QuLog Center
  • Low 2.1
    CVE-2024-38638

    QTS, QuTS hero

    An out-of-bounds write vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to modify or corrupt memory. QTS 5.2.x/QuTS hero h5.2.x …

    QNAP Systems QTS QuTS hero
  • Low 2.1
    CVE-2024-53697

    QTS, QuTS hero

    An out-of-bounds write vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to modify or corrupt memory. We have already fixed the v…

    QNAP Systems QTS QuTS hero
  • Low 2.1
    CVE-2024-53698

    QTS, QuTS hero

    A double free vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to modify memory. We have already fixed the vulnerability in the …

    QNAP Systems QTS QuTS hero
  • Low 2.1
    CVE-2024-53699

    QTS, QuTS hero

    An out-of-bounds write vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to modify or corrupt memory. We have already fixed the v…

    QNAP Systems QTS QuTS hero

Revision history

  1. #1

    Initiale Fassung

References