Exploit / PoCcritical

15 QNAP NAS bugs and one PoC disclosed, update ASAP! (CVE-2024-27130)

Help Net Securityby @zeljkazorzMay 21, 2024 · 00:00 UTC (May 21, 2024)2 min read3 · 1 read

Read at helpnetsecurity.com

Analyze CVE-2024-27130 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2024-27130 CVE-2023-50361 CVE-2023-50364 CVE-2024-21902 CVE-2024-27127

Tags: cve-2024-27130 cve-2023-50361 cve-2023-50364 cve-2024-21902 cve-2024-27127 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2023-50364 +1 related CVE CVE-2023-50361	A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions	8.8	<1%		Apr 26, 2024
CVE-2024-27130 +2 related CVEs CVE-2024-27127 CVE-2024-21902	A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions	8.8 group max	38%		May 21, 2024

From the original article

2 min read at helpnetsecurity.com

Researchers have found 15 vulnerabilities in QNAP’s network attached storage (NAS) devices, and have released a proof-of-concept for one: an unauthenticated stack overflow vulnerability (CVE-2024-27130) that may be leveraged for remote code execution.

Help Net Security

By @zeljkazorz · helpnetsecurity.com

Read the full article at Help Net Security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.