CVE-2024-37042 QTS, QuTS hero

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the...

CVE-2024-37043 QTS, QuTS hero

A path traversal vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to read the contents of unexpected files and expose sensitive data. We have already fixed the...

CVE-2024-37043

CVE-2024-37043 concerns a path traversal vulnerability in QNAP QTS (versions prior to 5.2.1.2930) and QuTS hero (prior to h5.2.1.2929). The issue could allow remote attackers with administrator access to read sensitive files, when exposed over the network. A patch is available in QTS 5.2.1.2930+ ...

CVE-2024-37043 QTS, QuTS hero

A path traversal vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to read the contents of unexpected files and expose sensitive data. We have already fixed the...

CVE-2024-37044 QTS, QuTS hero

A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to execute code. We have already fixed the vulnerability in the followin...

CVE-2024-37044 QTS, QuTS hero

A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to execute code. We have already fixed the vulnerability in the followin...

CVE-2024-37044

CVE-2024-37044 affects QNAP QTS and QuTS hero. A buffer copy without checking input size in these OSes can allow remote attackers who have gained administrator access to execute code. The vulnerability is mitigated by fixed builds: QTS 5.2.1.2930 build 20241025 and later, and QuTS hero h5.2.1.292...

CVE-2024-37045

CVE-2024-37045 affects QNAP QTS and QuTS hero. A NULL pointer dereference could allow remote attackers with administrator access to cause a DoS. The issue has been fixed in QTS 5.2.1.2930 build 20241025 and later, and in QuTS hero h5.2.1.2929 build 20241025 and later. If you rely on these product...

CVE-2024-37045 QTS, QuTS hero

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the...

CVE-2024-37045 QTS, QuTS hero

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the...

CVE-2024-37046 QTS, QuTS hero

A path traversal vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to read the contents of unexpected files and expose sensitive data. We have already fixed the...

CVE-2024-37046

CVE-2024-37046 is a path traversal vulnerability affecting QNAP QTS and QuTS hero. Affected software: QTS prior to 5.2.1.2930 build 20241025 and QuTS hero prior to h5.2.1.2929 build 20241025. Root cause: path traversal could allow an attacker with administrator access to read unexpected files and...

CVE-2024-37047

CVE-2024-37047 affects QNAP QTS and QuTS hero. A buffer copy without checking input size could allow remote attackers who have gained administrator access to execute code. Affected: QTS before 5.2.1.2930 build 20241025 and QuTS hero before h5.2.1.2929 build 20241025. Mitigation: upgrade to QTS 5....

CVE-2024-37047 QTS, QuTS hero

A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to execute code. We have already fixed the vulnerability in the followin...

CVE-2024-37048 QTS, QuTS hero

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the...

CVE-2024-37048

CVE-2024-37048 is a NULL pointer dereference in QNAP QTS and QuTS hero. Affected are QTS 5.2.1.2930 build 20241025 and later, and QuTS hero h5.2.1.2929 build 20241025 and later. Impact is denial-of-service (DoS) via remote access with admin privileges; no user interaction required. Fixed in the s...

CVE-2024-37048 QTS, QuTS hero

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the...

CVE-2024-37049 QTS, QuTS hero

A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to execute code. We have already fixed the vulnerability in the followin...

CVE-2024-37049 QTS, QuTS hero

A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to execute code. We have already fixed the vulnerability in the followin...

CVE-2024-37049

CVE-2024-37049 is a buffer copy without checking input size affecting QNAP QTS and QuTS hero. According to multiple sources (NVD entry and vendor/plugin references), the issue could allow remote attackers with administrator privileges to execute code on affected systems. Affected products are QTS...