DeutschShown in its original language — a full translation is planned for a future version.
QNAP NAS QTS und QTS hero: Mehrere Schwachstellen
view advisory published 2025-10-05
Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in QNAP NAS ausnutzen, um einen Denial of Service Angriff durchzuführen, beliebigen Code auszuführen, Daten zu manipulieren und vertrauliche Informationen offenzulegen.
01
describes (26)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-53407US | medium6.5 | — | ||
A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account,… | ||||
| CVE-2025-53406US | medium6.5 | — | ||
A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account,… | ||||
| CVE-2025-52866US | medium4.9 | — | ||
A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then expl… | ||||
| CVE-2025-52862US | medium4.9 | — | ||
A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then expl… | ||||
| CVE-2025-52860US | medium4.9 | — | ||
A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then expl… | ||||
| CVE-2025-52859US | medium4.9 | — | ||
A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then expl… | ||||
| CVE-2025-52858US | medium4.9 | — | ||
A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then expl… | ||||
| CVE-2025-52857US | medium4.9 | — | ||
A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then expl… | ||||
| CVE-2025-52855US | medium4.9 | — | ||
A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then expl… | ||||
| CVE-2025-52854US | medium4.9 | — | ||
A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then expl… | ||||
| CVE-2025-52853US | medium4.9 | — | ||
A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then expl… | ||||
| CVE-2025-52433US | medium4.9 | — | ||
A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then expl… | ||||
| CVE-2025-52432US | medium4.9 | — | ||
A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then expl… | ||||
| CVE-2025-52429US | medium6.5 | — | ||
A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account,… | ||||
| CVE-2025-52428US | medium4.9 | — | ||
A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then expl… | ||||
| CVE-2025-52427US | medium4.9 | — | ||
A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then expl… | ||||
| CVE-2025-52424US | medium4.9 | — | ||
A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then expl… | ||||
| CVE-2025-48730US | medium6.5 | — | ||
A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account,… | ||||
| CVE-2025-48729US | medium4.9 | — | ||
A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then expl… | ||||
| CVE-2025-48728US | medium4.9 | — | ||
A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then expl… | ||||
showing 20 of 26
02
references
External citations — patches, advisories, analysis.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan