CVE-2024-37050

CVE-2024-37050 is a buffer copy vulnerability affecting QNAP QTS and QuTS hero prior to the fixed versions. The issue allows code execution by remote attackers who have gained administrator access, as described in multiple sources. Affected versions require upgrading to: QTS 5.2.1.2930 build 2024...

CVE-2024-37050 QTS, QuTS hero

A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to execute code. We have already fixed the vulnerability in the followin...

CVE-2024-38647 QNAP AI Core

An exposure of sensitive information vulnerability has been reported to affect QNAP AI Core. If exploited, the vulnerability could allow remote attackers to compromise the security of the system. We have already fixed the vulnerability in the following version: QNAP AI Core 3.4.1 and later...

CVE-2024-38647

CVE-2024-38647 affects QNAP AI Core. It is described as an exposure of sensitive information vulnerability that could allow remote attackers to compromise system security. The issue is fixed in QNAP AI Core 3.4.1 and later. Reported CVSS metrics indicate high severity (CVSS 3.1: High, network att...

CVE-2024-38647 QNAP AI Core

An exposure of sensitive information vulnerability has been reported to affect QNAP AI Core. If exploited, the vulnerability could allow remote attackers to compromise the security of the system. We have already fixed the vulnerability in the following version: QNAP AI Core 3.4.1 and later...

CVE-2024-50396

CVE-2024-50396 describes a use of externally-controlled format string vulnerability affecting QNAP QTS and QuTS hero. Concrete details in connected sources show impact on several QNAP OS versions and that a fix has been applied in QTS 5.2.1.2930 build 20241025 and later and QuTS hero h5.2.1.2929 ...

CVE-2024-50396 QTS, QuTS hero

A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers to obtain secret data or modify memory. We have already fixed the vulnerability in the following versions: QT...

CVE-2024-50396 QTS, QuTS hero

A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers to obtain secret data or modify memory. We have already fixed the vulnerability in the following versions: QT...

CVE-2024-50397 QTS, QuTS hero

A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained user access to obtain secret data or modify memory. We have already fixed the vulnerability i...

CVE-2024-50397

CVE-2024-50397 affects QNAP QTS and QuTS hero: a use of externally-controlled format string vulnerability could allow remote attackers with user access to obtain secret data or modify memory. Affected versions include QTS 5.2.1.2930 build 20241025 and later, and QuTS hero h5.2.1.2929 build 202410...

CVE-2024-50397 QTS, QuTS hero

A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained user access to obtain secret data or modify memory. We have already fixed the vulnerability i...

CVE-2024-50398 QTS, QuTS hero

A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to obtain secret data or modify memory. We have already fixed the...

CVE-2024-50398 QTS, QuTS hero

A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to obtain secret data or modify memory. We have already fixed the...

CVE-2024-50398

CVE-2024-50398 is a use of externally-controlled format string vulnerability affecting QNAP QTS and QuTS hero. The issue could allow remote attackers with administrator access to obtain secret data or modify memory. Affected versions include QTS prior to 5.2.1.2930 (build 20241025) and QuTS hero ...

CVE-2024-50399

CVE-2024-50399 affects QNAP QTS and QuTS hero (externally-controlled format string). The vulnerability enables remote attackers with administrator access to obtain secret data or modify memory. Affected: QTS 5.2.1.2930 build 20241025 and later; QuTS hero h5.2.1.2929 build 20241025 and later. Root...

CVE-2024-50399 QTS, QuTS hero

A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to obtain secret data or modify memory. We have already fixed the...

CVE-2024-50399 QTS, QuTS hero

A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to obtain secret data or modify memory. We have already fixed the...

CVE-2024-50400 QTS, QuTS hero

A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to obtain secret data or modify memory. We have already fixed the...

CVE-2024-50400

CVE-2024-50400 affects QNAP QTS and QuTS hero where a use of externally-controlled format string vulnerability exists in the system. The root cause is a format string handling issue that could allow a remote attacker with administrator access to obtain secret data or modify memory. Affected detai...

CVE-2024-50400 QTS, QuTS hero

A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to obtain secret data or modify memory. We have already fixed the...