NCSC-2024-0361

csafNLncsc_nl

NLShown in its original language — a full translation is planned for a future version.

Kwetsbaarheden verholpen in QNAP QTS en QTS Hero

view advisory published 2024-09-10

QNAP heeft kwetsbaarheden verholpen in QTS en QTS Hero.

01

describes (7)

Related CVEs.

IDseverity exploitable
CVE-2024-38641UShigh7.8—
An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow local network users to execute…
CVE-2024-32771USlow2.4—
An improper restriction of excessive authentication attempts vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could…
CVE-2024-32763UShigh8.8—
A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authentic…
CVE-2024-21906USmedium4.7—
An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators t…
CVE-2023-39298UShigh7.8OT elevated—
A missing authorization vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow local authenticated users to a…
CVE-2023-34979UShigh7.2—
An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators t…
CVE-2023-34974UShigh8.8—
An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to execute commands via…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan