QNAP NAS Multiple Vulnerabilities
Release Date:
1 Sep 2025
12931
Views
RISK: Medium Risk
TYPE: Servers - Other Servers
Multiple vulnerabilities were identified in QNAP NAS. A remote attacker could exploit some of these vulnerabilities to trigger denial of service condition, remote code execution, sensitive information disclosure and data manipulation on the targeted system.
Impact
- Remote Code Execution
- Denial of Service
- Information Disclosure
- Data Manipulation
System / Technologies affected
- QTS 5.2.x
- QuTS hero h5.2.x
Solutions
Before installation of the software, please visit the vendor web-site for more details.
Apply fixes issued by the vendor:
- https://www.qnap.com/en/security-advisory/qsa-25-21
- https://www.qnap.com/en/security-advisory/qsa-25-23
Vulnerability Identifier
- CVE-2022-22995
- CVE-2022-45188
- CVE-2023-42464
- CVE-2024-38439
- CVE-2024-38440
- CVE-2024-38441
- CVE-2025-29882
- CVE-2025-30264
- CVE-2025-30265
- CVE-2025-30267
- CVE-2025-30268
- CVE-2025-30270
- CVE-2025-30271
- CVE-2025-30272
- CVE-2025-30273
- CVE-2025-30274
- CVE-2025-33032
Source
Related Link
Share with