QNAP NAS Multiple Vulnerabilities
Release Date:
16 Aug 2022
6052
Views
RISK: Medium Risk
TYPE: Servers - Other Servers
Multiple vulnerabilities were identified in QNAP NAS. A remote attacker could exploit some of these vulnerabilities to trigger denial of service condition, elevation of privilege, remote code execution, sensitive information disclosure, cross-site scripting and security restriction bypass on the targeted system.
Impact
- Denial of Service
- Elevation of Privilege
- Remote Code Execution
- Information Disclosure
- Cross-Site Scripting
- Security Restriction Bypass
System / Technologies affected
- QTS 4.2.x
- QTS 4.3.x
- QTS 4.5.x/4.4.x
- QTS 5.0.0
- QTS 5.0.1
- QuTS hero h4.5.x
- QuTS hero h5.0.0
- QuTS hero h5.0.1
- QuTScloud c5.0.1
Solutions
Before installation of the software, please visit the vendor web-site for more details.
- Apply fixes issued by the vendor:
https://www.qnap.com/en/security-advisory/qsa-22-11
Vulnerability Identifier
- CVE-2022-2031
- CVE-2022-22721
- CVE-2022-23943
- CVE-2022-26377
- CVE-2022-28330
- CVE-2022-28614
- CVE-2022-28615
- CVE-2022-29404
- CVE-2022-30522
- CVE-2022-30556
- CVE-2022-31813
- CVE-2022-32742
- CVE-2022-32744
- CVE-2022-32745
- CVE-2022-32746
Source
Related Link
Related Tags
Share with