Lucene search

K
cvelistQnapCVELIST:CVE-2024-27128
HistoryMay 21, 2024 - 4:08 p.m.

CVE-2024-27128 QTS, QuTS hero

2024-05-2116:08:34
CWE-120
qnap
raw.githubusercontent.com
6
buffer copy vulnerability
qnap operating system
authenticated users
execute code
patched version

7.5 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

8.7%

A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users to execute code via a network.

We have already fixed the vulnerability in the following version:
QTS 5.1.7.2770 build 20240520 and later
QuTS hero h5.1.7.2770 build 20240520 and later

7.5 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

8.7%

Related for CVELIST:CVE-2024-27128