Qnap QTS and QuTS hero Uncontrolled Resource Consumption (CVE-2022-27600)

#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
##

include('compat.inc');

if (description)
{
  script_id(504999);
  script_version("1.2");
  script_set_attribute(attribute:"plugin_modification_date", value:"2026/02/05");

  script_cve_id("CVE-2022-27600");

  script_name(english:"Qnap QTS and QuTS hero Uncontrolled Resource Consumption (CVE-2022-27600)");

  script_set_attribute(attribute:"synopsis", value:
"The remote OT asset is affected by a vulnerability.");
  script_set_attribute(attribute:"description", value:
"An uncontrolled resource consumption vulnerability has been reported
to affect several QNAP operating system versions. If exploited, the
vulnerability could allow remote attackers to launch a denial-of-
service (DoS) attack. We have already fixed the vulnerability in the
following versions: QTS 5.0.1.2277 and later QTS 4.5.4.2280 build
20230112 and later QuTS hero h5.0.1.2277 build 20230112 and later QuTS
hero h4.5.4.2374 build 20230417 and later QuTScloud c5.0.1.2374 and
later

This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.");
  script_set_attribute(attribute:"see_also", value:"https://www.qnap.com/en/security-advisory/qsa-23-09");
  script_set_attribute(attribute:"solution", value:
"Refer to the vendor advisory.");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:C");
  script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:U/RL:O/RC:C");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2022-27600");

  script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");
  script_set_attribute(attribute:"exploit_available", value:"false");
  script_cwe_id(400);

  script_set_attribute(attribute:"vuln_publication_date", value:"2024/12/19");
  script_set_attribute(attribute:"patch_publication_date", value:"2024/12/19");
  script_set_attribute(attribute:"plugin_publication_date", value:"2026/01/19");

  script_set_attribute(attribute:"plugin_type", value:"remote");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:qnap:qts:4");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:qnap:qts:5");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:qnap:quts_hero:h4");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:qnap:quts_hero:h5");
  script_set_attribute(attribute:"generated_plugin", value:"former");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Tenable.ot");

  script_copyright(english:"This script is Copyright (C) 2026 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("tenable_ot_api_integration.nasl");
  script_require_keys("Tenable.ot/Qnap");

  exit(0);
}


include('tenable_ot_cve_funcs.inc');

get_kb_item_or_exit('Tenable.ot/Qnap');

var asset = tenable_ot::assets::get(vendor:'Qnap');

var vuln_cpes = {
    "cpe:/o:qnap:qts:4" :
        {"versionEndExcluding" : "4.5.4.2280", "versionStartIncluding" : "4.0", "family" : "QTS"},
    "cpe:/o:qnap:qts:5" :
        {"versionEndExcluding" : "5.0.1.2277", "versionStartIncluding" : "5.0", "family" : "QTS"},
    "cpe:/o:qnap:quts_hero:h4" :
        {"versionEndExcluding" : "h4.5.4.2374", "versionStartIncluding" : "h4.0", "family" : "QuTShero"},
    "cpe:/o:qnap:quts_hero:h5" :
        {"versionEndExcluding" : "h5.0.1.2277", "versionStartIncluding" : "h5.0", "family" : "QuTShero"}
};

tenable_ot::cve::compare_and_report(asset:asset, cpes:vuln_cpes, severity:SECURITY_HOLE);