Description
An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow local network users to execute commands via unspecified vectors.
We have already fixed the vulnerability in the following versions:
QTS 5.1.8.2823 build 20240712 and later
QuTS hero h5.1.8.2823 build 20240712 and later
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| QNAP Systems | QTS | 5.1.x – < 5.1.8.2823 build 20240712 | 5.1.8.2823 build 20240712 |
| QNAP Systems | QuTS hero | h5.1.x – < h5.1.8.2823 build 20240712 | h5.1.8.2823 build 20240712 |
Advisories 2
- NCSC-2024-0361 Kwetsbaarheden verholpen in QNAP QTS en QTS Hero NCSC-NL (Netherlands) · Sep 10, 2024
- WID-SEC-2024-2077 QNAP NAS QTS and QuTS hero: Mehrere Schwachstellen BSI CERT-Bund (WID) · Sep 8, 2024