Vulnerabilitycritical

QNAP Patches New Flaws in QTS and QuTS hero Impacting NAS Appliances

The Hacker Newsby @TheHackersNewsMay 22, 2024 · 06:57 UTC (May 22, 2024)3 min read3

Read at thehackernews.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2024-21902 CVE-2024-27127 CVE-2024-27128 CVE-2024-27129 CVE-2024-27130 CVE-2023-50361 CVE-2023-50364 CVE-2024-27131

Tags: cve-2024-21902 cve-2024-27127 cve-2024-27128 cve-2024-27129 cve-2024-27130 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2023-50364 +1 related CVE CVE-2023-50361	A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions	8.8	<1%		Apr 26, 2024
CVE-2024-27130 +4 related CVEs CVE-2024-27127 CVE-2024-27128 CVE-2024-27129 CVE-2024-21902	A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions	8.8 group max	38%		May 21, 2024

From the original article

3 min read at thehackernews.com

 Ravie Lakshmanan  May 22, 2024 Data Security / Vulnerability Taiwanese company QNAP has rolled out fixes for a set of medium-severity flaws impacting QTS and QuTS hero, some of which could be exploited to achieve code execution on its network-attached storage (NAS) appliances. The issues , which impact QTS 5. 1.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.