CVE-2020-2509criticalunder attackCWE-77CWE-78

CVE-2020-2509: critical vulnerability in QNAP Systems Inc. QTS

Command Injection Vulnerability in QTS and QuTS hero

Published · Updated

Follow this CVE+ Monitor QTS+ Monitor QuTS hero

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

90Vexday Risk Score

Prioritize patching. It under exploitation confirmed by CISA and has a public proof of concept.

ssvc Actcvss 9.8epss 34%
from disclosure to weapon466 days
Published on NVDApr 17
1st PoC+466d
CISA KEV+359d
Action required by CISAfederal deadline: 2022-05-02

Apply updates per vendor instructions.

In short

A flaw in QTS and QuTS hero operating systems allows attackers to run unauthorized commands on affected devices. This is a critical issue because it can give attackers complete control over the system.

Technical detail

Command injection vulnerability in QTS and QuTS hero allows unauthenticated or authenticated attackers to execute arbitrary operating system commands through insufficient input validation in application parameters. Successful exploitation results in complete system compromise with unrestricted code execution.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

A command injection vulnerability has been reported to affect QTS and QuTS hero. If exploited, this vulnerability allows attackers to execute arbitrary commands in a compromised application. We have already fixed this vulnerability in the following versions: QTS 4.5.2.1566 Build 20210202 and later QTS 4.5.1.1495 Build 20201123 and later QTS 4.3.6.1620 Build 20210322 and later QTS 4.3.4.1632 Build 20210324 and later QTS 4.3.3.1624 Build 20210416 and later QTS 4.2.6 Build 20210327 and later QuTS hero h4.5.1.1491 build 20201119 and later
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
QNAP Systems Inc. · QTSQNAP Systems Inc. · QuTS hero
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — QNAP Systems Inc. QTS

In the same product, most dangerous first.

CVE-2018-19953MEDIUMCVE-2018-19953EPSS 30.5%KEVCVE-2018-19949CRITICALCVE-2018-19949EPSS 30.2%KEVCVE-2018-19943HIGHCVE-2018-19943EPSS 22.7%KEVCVE-2023-47218MEDIUMQTS, QuTS hero, QuTScloudEPSS 89.9%CVE-2023-51364HIGHQTS, QuTS hero, QuTScloudEPSS 39.7%CVE-2024-27130HIGHQTS, QuTS heroEPSS 37.5%