CVE-2024-21902

Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

Published: 21/05/2024 Updated: 21/05/2024

An incorrect permission assignment for critical resource vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users to read or modify the resource via a network. We have already fixed the vulnerability in the following version: QTS 5.1.7.2770 build 20240520 and later QuTS hero h5.1.7.2770 build 20240520 and later

QNAP QTS zero-day in Share feature gets public RCE exploit

BleepingComputer • Bill Toulas • 20 May 2024

QNAP QTS zero-day in Share feature gets public RCE exploit By Bill Toulas May 20, 2024 10:57 AM 0 An extensive security audit of QNAP QTS, the operating system for the company's NAS products, has uncovered fifteen vulnerabilities of varying severity, with eleven remaining unfixed. Among them is CVE-2024-27130, an unpatched stack buffer overflow vulnerability in the 'No_Support_ACL' function of 'share.cgi,' which could enable an attacker to perform remote code execution when specific pr...

CVE-2024-21902

Vulnerability Summary

Recent Articles

References

Vulmon Search

About

Products

Connect