QNAP Patches New Flaws in QTS and QuTS hero Impacting NAS Appliances

🗓️ 22 May 2024 05:15:00Reported by The Hacker NewsType

thn

thn🔗 thehackernews.com👁 36 Views

QNAP patches medium-severity flaws in QTS and QuTS hero for NAS appliance

Reporter	Title	Published	Views	Family All 92
GithubExploit	Exploit for Classic Buffer Overflow in Qnap Qts	21 May 202411:14	–	githubexploit
GithubExploit	Exploit for Classic Buffer Overflow in Qnap Qts	17 May 202407:58	–	githubexploit
GithubExploit	Exploit for Classic Buffer Overflow in Qnap Qts	22 Nov 202414:18	–	githubexploit
BDU FSTEC	The vulnerability of the QTS and QuTS operating systems affects network storage devices from QNAP, caused by buffer overflows in the stack. This allows attackers to compromise data integrity.	17 May 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the QTS and QuTS operating systems affects network storage devices from QNAP, caused by buffer overflows in the stack. This allows attackers to execute arbitrary code.	17 May 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the get_file_size function of the share.cgi file on QTS, QuTS hero, and QuTScloud operating systems, as well as on Qnap network devices, allows a hacker to execute arbitrary code.	20 May 202400:00	–	bdu_fstec
BDU FSTEC	Vulnerability of QTS and QuTS operating systems, as well as QNAP network devices, related to the operation of operations beyond the buffer in memory, allowing attackers to execute arbitrary code.	5 Jul 202400:00	–	bdu_fstec
BDU FSTEC	Vulnerability of QTS and QuTS operating systems, as well as QNAP network devices, arises from the improper assignment of permissions for critical resources, allowing attackers to execute arbitrary code.	5 Jul 202400:00	–	bdu_fstec
BDU FSTEC	Vulnerability of QTS and QuTS operating systems, as well as QNAP network devices, related to the operation of operations beyond the buffer in memory, allowing attackers to execute arbitrary code.	5 Jul 202400:00	–	bdu_fstec
BDU FSTEC	Vulnerability of QTS and QuTS operating systems, as well as Qnap network devices, related to the re-release of memory allows attackers to execute arbitrary code.	12 Jul 202400:00	–	bdu_fstec

22 May 2024 06:57Current

9.1High risk

Vulners AI Score9.1

CVSS 3.17.2 - 8.8

EPSS0.38054

SSVC

qnap medium-severity flaws qts quts hero nas appliances code execution buffer overflow permission assignment double free cve-2024-21902 cve-2024-27127 cve-2024-27128 cve-2024-27129 discovery and reporting watchtowr labs aslr authentication bypass arbitrary code execution