DeutschIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
QNAP NAS QTS und QTS hero: Mehrere Schwachstellen
Advisory ansehen veröffentlicht 2025-10-05
Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in QNAP NAS ausnutzen, um einen Denial of Service Angriff durchzuführen, beliebigen Code auszuführen, Daten zu manipulieren und vertrauliche Informationen offenzulegen.
01
beschreibt (26)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2025-53407US | medium6.5 | — | ||
A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account,… | ||||
| CVE-2025-53406US | medium6.5 | — | ||
A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account,… | ||||
| CVE-2025-52866US | medium4.9 | — | ||
A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then expl… | ||||
| CVE-2025-52862US | medium4.9 | — | ||
A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then expl… | ||||
| CVE-2025-52860US | medium4.9 | — | ||
A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then expl… | ||||
| CVE-2025-52859US | medium4.9 | — | ||
A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then expl… | ||||
| CVE-2025-52858US | medium4.9 | — | ||
A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then expl… | ||||
| CVE-2025-52857US | medium4.9 | — | ||
A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then expl… | ||||
| CVE-2025-52855US | medium4.9 | — | ||
A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then expl… | ||||
| CVE-2025-52854US | medium4.9 | — | ||
A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then expl… | ||||
| CVE-2025-52853US | medium4.9 | — | ||
A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then expl… | ||||
| CVE-2025-52433US | medium4.9 | — | ||
A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then expl… | ||||
| CVE-2025-52432US | medium4.9 | — | ||
A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then expl… | ||||
| CVE-2025-52429US | medium6.5 | — | ||
A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account,… | ||||
| CVE-2025-52428US | medium4.9 | — | ||
A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then expl… | ||||
| CVE-2025-52427US | medium4.9 | — | ||
A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then expl… | ||||
| CVE-2025-52424US | medium4.9 | — | ||
A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then expl… | ||||
| CVE-2025-48730US | medium6.5 | — | ||
A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account,… | ||||
| CVE-2025-48729US | medium4.9 | — | ||
A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then expl… | ||||
| CVE-2025-48728US | medium4.9 | — | ||
A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then expl… | ||||
20 von 26 angezeigt
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan