Description
A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to execute code via a network.
We have already fixed the vulnerability in the following version:
QTS 5.1.7.2770 build 20240520 and later
QuTS hero h5.1.7.2770 build 20240520 and later
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| QNAP Systems | QTS | 5.1.x – < 5.1.7.2770 build 20240520 | 5.1.7.2770 build 20240520 |
| QNAP Systems | QuTS hero | h5.1.x – < h5.1.7.2770 build 20240520 | h5.1.7.2770 build 20240520 |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
GitHub 3 repositories
-
watchtowrlabs/CVE-2024-27130 ★ 39 · May 17, 2024
PoC for CVE-2024-27130
-
d0rb/CVE-2024-27130 ★ 2 · May 21, 2024
This Python script is designed as a proof-of-concept (PoC) for the CVE-2024-27130 vulnerability in QNAP QTS
-
dkstar11q/cve-2024-27130-poc ★ 0 · Dec 24, 2024
CVE-2024-27130是影响QNAP网络附加存储（NAS）设备的一个严重漏洞。该漏洞源于QTS操作系统中share.cgi脚本的No_Support_ACL函数中不安全地使用strcpy函数，导致堆栈缓冲区溢出。攻击者可以利用此漏洞，通过精心构造的请求在目标系统上执行任意代码，进而完全控制受影响的设备。
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Advisories 2
- NCSC-2024-0230 Kwetsbaarheden verholpen in QNAP QTS en QTS Hero NCSC-NL (Netherlands) · May 22, 2024
- WID-SEC-2024-1195 QNAP NAS: Mehrere Schwachstellen BSI CERT-Bund (WID) · May 21, 2024