CVE-2024-27130highobserved exploitationCWE-120CWE-121

CVE-2024-27130: high-severity vulnerability in QNAP Systems Inc. QTS

QTS, QuTS hero

Published · Updated

Follow this CVE+ Monitor QTS+ Monitor QuTS hero

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

75Vexday Risk Score

Prioritize patching. It exploitation observed by VulnCheck and has a public proof of concept.

ssvc Actcvss 7.2epss 38%
from disclosure to weaponsame day
Published on NVDMay 21
1st PoCMay 17
VulnCheck+6d
In short

A buffer overflow vulnerability in QNAP QTS and QuTS hero operating systems allows attackers to execute arbitrary code over the network by sending specially crafted data that exceeds expected buffer limits.

Technical detail

CWE-120/121 buffer copy vulnerability in QNAP QTS and QuTS hero enables remote code execution when the system fails to validate input size before copying to a fixed-size buffer. Exploitation requires network access and no authentication; successful exploitation grants arbitrary code execution with system privileges.

Summary generated and translated by AI from the official description.
A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to execute code via a network. We have already fixed the vulnerability in the following version: QTS 5.1.7.2770 build 20240520 and later QuTS hero h5.1.7.2770 build 20240520 and later
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:L
Affected products
QNAP Systems Inc. · QTSQNAP Systems Inc. · QuTS hero
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — QNAP Systems Inc. QTS

In the same product, most dangerous first.

CVE-2020-2509CRITICALCommand Injection Vulnerability in QTS and QuTS heroEPSS 34.0%KEVCVE-2018-19953MEDIUMCVE-2018-19953EPSS 30.5%KEVCVE-2018-19949CRITICALCVE-2018-19949EPSS 30.2%KEVCVE-2018-19943HIGHCVE-2018-19943EPSS 22.7%KEVCVE-2023-47218MEDIUMQTS, QuTS hero, QuTScloudEPSS 89.9%CVE-2023-51364HIGHQTS, QuTS hero, QuTScloudEPSS 39.7%