DeutschShown in its original language — a full translation is planned for a future version.
QNAP NAS: Mehrere Schwachstellen
view advisory published 2024-11-24
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in QNAP NAS ausnutzen, um Speicher zu manipulieren, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand zu erzeugen.
01
describes (16)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-50401US | high7.2 | — | ||
A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote at… | ||||
| CVE-2024-50400US | high7.2 | — | ||
A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote at… | ||||
| CVE-2024-50399US | high7.2 | — | ||
A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote at… | ||||
| CVE-2024-50398US | high7.2 | — | ||
A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote at… | ||||
| CVE-2024-50397US | high8.8 | — | ||
A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote at… | ||||
| CVE-2024-50396US | high8.8 | — | ||
A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote at… | ||||
| CVE-2024-37050US | medium6.5 | — | ||
A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote at… | ||||
| CVE-2024-37049US | medium6.5 | — | ||
A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote at… | ||||
| CVE-2024-37048US | medium4.9 | — | ||
A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have g… | ||||
| CVE-2024-37047US | medium6.5 | — | ||
A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote at… | ||||
| CVE-2024-37046US | medium4.9 | — | ||
A path traversal vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained admi… | ||||
| CVE-2024-37045US | medium4.9 | — | ||
A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have g… | ||||
| CVE-2024-37044US | high7.2 | — | ||
A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote at… | ||||
| CVE-2024-37043US | medium4.9 | — | ||
A path traversal vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained admi… | ||||
| CVE-2024-37042US | medium4.9 | — | ||
A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have g… | ||||
| CVE-2024-37041US | high7.2 | — | ||
A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote at… | ||||
02
references
External citations — patches, advisories, analysis.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan