CVE-2022-27596 Vulnerability in QTS

A vulnerability has been reported to affect QNAP device running QuTS hero, QTS. If exploited, this vulnerability allows remote attackers to inject malicious code. We have already fixed this vulnerability in the following versions of QuTS hero, QTS: QuTS hero h5.0.1.2248 build 20221215 and later Q...

CVE-2022-27596

CVE-2022-27596 affects QNAP QTS and QuTS hero (QuTS hero h5.0.1.2248 build 20221215+; QTS 5.0.1.2234 build 20221201+) and is described as a remotely exploitable issue that enables arbitrary code execution, with sources classifying the flaw as an SQL injection vulnerability. The NVD and vendor adv...

QNAP Systems QTS 和 QuTS hero SQL注入漏洞

QNAP Systems QTS and QNAP Systems QuTS hero are both products of China's Weilian Technology QNAP Systems.QNAP Systems QTS is an operating system used by entry to mid-level QNAP NAS.QNAP Systems QuTS hero is an operating system. A security vulnerability exists in QNAP that stems from a device...

PT-2023-1262 · Qnap · Qts +1

Name of the Vulnerable Software and Affected Versions: QuTS hero versions prior to h5.0.1.2248 build 20221215 QTS versions prior to 5.0.1.2234 build 20221201 Description: A vulnerability has been reported to affect QNAP devices running QuTS hero and QTS, allowing remote attackers to inject...

The vulnerability of the QTS operating system, specifically the QuTS hero operating system, arises from an improper definition of the link before accessing a file. This allows attackers to compromise the confidentiality and integrity of information.

The vulnerability of the QTS operating system is related to an incorrect definition of the link before accessing a file. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality and integrity of information...

The vulnerability of the QTS operating system, specifically the QuTS Hero operating system, is related to the lack of protective measures for website structures. This allows attackers to compromise the confidentiality and integrity of information.

The vulnerability of the QTS operating system is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality and integrity of information...

The vulnerability of the QuTS operating system, specifically the QTS operating system, is related to the use of open redirection. This allows attackers to compromise the confidentiality and integrity of information.

The vulnerability of the QuTS operating system, specifically the QTS operating system, is related to the use of open redirection. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality and integrity of information...

The vulnerability of the QTS operating system, specifically the QuTS Hero operating system, is related to deficiencies in pathname restriction, which allows attackers to compromise the confidentiality of information.

The vulnerability of the QTS operating system is related to deficiencies in pathname restriction. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality of information...

Critical PHP Vulnerability Exposes QNAP NAS Devices to Remote Attacks

QNAP, Taiwanese maker of network-attached storage NAS devices, on Wednesday said it's in the process of fixing a critical three-year-old PHP vulnerability that could be abused to achieve remote code execution. "A vulnerability has been reported to affect PHP versions 7.1.x below 7.1.33, 7.2.x bel...

QNAP QuTS hero RCE Vulnerability (QSA-22-20)

QNAP QuTS hero is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

QNAP QuTS hero Privilege Escalation Vulnerability (QSA-22-05)

QNAP QuTS hero is prone to a local privilege escalation vulnerability, also known as dirty pipe. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-onl...

QNAP QuTS hero Multiple Vulnerabilities (QSA-22-12)

QNAP QuTS hero is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:qnap:qutshero"; ifdescriptio...

QNAP QuTS hero Multiple Vulnerabilities (QSA-22-16)

QNAP QuTS hero is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:qnap:qutshero"; ifdescriptio...

QNAP QuTS hero Path Traversal Vulnerability (QSA-22-13)

QNAP QuTS hero is prone to a path traversal vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:qnap:qutshero";...

QNAP QuTS hero Multiple Samba Vulnerabilities (QSA-22-03)

QNAP QuTS hero is prone to multiple vulnerabilities in Samba. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:qnap:qutshero";...

QNAP QuTS hero RCE Vulnerability (QSA-21-57)

QNAP QuTS hero is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2021-34360

A cross-site request forgery CSRF vulnerability has been reported to affect QNAP device running Proxy Server. If exploited, this vulnerability allows remote attackers to inject malicious code. We have already fixed this vulnerability in the following versions of Proxy Server: QTS 4.5.x: Proxy...

CVE-2021-34360

A cross-site request forgery CSRF vulnerability has been reported to affect QNAP device running Proxy Server. If exploited, this vulnerability allows remote attackers to inject malicious code. We have already fixed this vulnerability in the following versions of Proxy Server: QTS 4.5.x: Proxy...

CVE-2021-34360 CSRF Bypass in Proxy Server

A cross-site request forgery CSRF vulnerability has been reported to affect QNAP device running Proxy Server. If exploited, this vulnerability allows remote attackers to inject malicious code. We have already fixed this vulnerability in the following versions of Proxy Server: QTS 4.5.x: Proxy...

QNAP NAS 代理服务器跨站请求伪造漏洞

QNAP NAS is an accessible and fast storage solution from China-based QNAP Technologies QNAP. A cross-site request forgery vulnerability exists in the proxy server of QNAP NAS, which can be exploited by remote attackers to inject malicious code. The following products and versions are affected: QT...