Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 21/05/2024 Updated: 21/05/2024

A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users to execute code via a network. We have already fixed the vulnerability in the following version: QTS 5.1.7.2770 build 20240520 and later QuTS hero h5.1.7.2770 build 20240520 and later

QNAP QTS zero-day in Share feature gets public RCE exploit

BleepingComputer • Bill Toulas • 20 May 2024

QNAP QTS zero-day in Share feature gets public RCE exploit By Bill Toulas May 20, 2024 10:57 AM 0 An extensive security audit of QNAP QTS, the operating system for the company's NAS products, has uncovered fifteen vulnerabilities of varying severity, with eleven remaining unfixed. Among them is CVE-2024-27130, an unpatched stack buffer overflow vulnerability in the 'No_Support_ACL' function of 'share.cgi,' which could enable an attacker to perform remote code execution when specific pr...

CVE-2024-27128

Vulnerability Summary

Recent Articles

References

Vulmon Search

About

Products

Connect