DeutschIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
QNAP NAS: Mehrere Schwachstellen
Advisory ansehen veröffentlicht 2024-11-24
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in QNAP NAS ausnutzen, um Speicher zu manipulieren, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand zu erzeugen.
01
beschreibt (16)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2024-50401US | high7.2 | — | ||
A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote at… | ||||
| CVE-2024-50400US | high7.2 | — | ||
A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote at… | ||||
| CVE-2024-50399US | high7.2 | — | ||
A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote at… | ||||
| CVE-2024-50398US | high7.2 | — | ||
A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote at… | ||||
| CVE-2024-50397US | high8.8 | — | ||
A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote at… | ||||
| CVE-2024-50396US | high8.8 | — | ||
A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote at… | ||||
| CVE-2024-37050US | medium6.5 | — | ||
A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote at… | ||||
| CVE-2024-37049US | medium6.5 | — | ||
A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote at… | ||||
| CVE-2024-37048US | medium4.9 | — | ||
A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have g… | ||||
| CVE-2024-37047US | medium6.5 | — | ||
A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote at… | ||||
| CVE-2024-37046US | medium4.9 | — | ||
A path traversal vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained admi… | ||||
| CVE-2024-37045US | medium4.9 | — | ||
A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have g… | ||||
| CVE-2024-37044US | high7.2 | — | ||
A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote at… | ||||
| CVE-2024-37043US | medium4.9 | — | ||
A path traversal vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained admi… | ||||
| CVE-2024-37042US | medium4.9 | — | ||
A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have g… | ||||
| CVE-2024-37041US | high7.2 | — | ||
A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote at… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan