Vulnerabilities > CVE-2024-27130 - Stack-based Buffer Overflow vulnerability in Qnap QTS and Quts Hero

047910
CVSS 8.8 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
LOW
Confidentiality impact
HIGH
Integrity impact
HIGH
Availability impact
HIGH
network
low complexity
qnap
CWE-121
NVD
Published: 2024-05-21
Updated: 2024-09-11

Summary

A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to execute code via a network. We have already fixed the vulnerability in the following version: QTS 5.1.7.2770 build 20240520 and later QuTS hero h5.1.7.2770 build 20240520 and later

Vulnerable Configurations

Part Description Count
OS
Qnap
23

Common Weakness Enumeration (CWE)

References