QNAP QTS vulnerabilities

QNAP QTS before version 4.2.6 build 20170517 has a flaw in the change password function.

QNAP QTS before version 4.2.4 Build 20170313 allows local users to obtain sensitive Domain Administrator password information by reading data in an XOR format within the /etc/config/uLinux.conf configuration file.

CVE-2015-6003 is a directory traversal vulnerability in QNAP QTS before version 4.1.4 build 0910 and 4.2.x before version 4.2.0 RC2 build 0910, when AFP is enabled. It allows remote attackers to read or write to arbitrary files by leveraging access to an OS X user or guest account.

A buffer overflow vulnerability in the password function in QNAP QTS versions 4.2.6, 4.3.3.0378, 4.3.4.0387 (Beta 2) and earlier could allow remote attackers to execute arbitrary code on NAS devices.

A buffer overflow vulnerability in the login function in QNAP QTS affects versions 4.2.6, 4.3.3.0378, 4.3.4.0387 (Beta 2) and earlier. This could allow remote attackers to execute arbitrary code on NAS devices.

A buffer overflow vulnerability in the login function in QNAP QTS affects versions 4.2.6 build 20171026, 4.3.3.0378 build 20171117, 4.3.4.0387 (Beta 2) build 20171116 and earlier. This could allow remote attackers to execute arbitrary code on NAS devices.

A buffer overflow vulnerability in external device function in QNAP QTS versions 4.2.6, 4.3.3.0378, 4.3.4.0387 (Beta 2) and earlier could allow remote attackers to execute arbitrary code on NAS devices.

QNAP QTS before version 4.2.4 Build 20170313 allows attackers to execute arbitrary commands via unspecified vectors.

QNAP QTS before version 4.2.4 Build 20170313 allows attackers to gain administrator privileges and access sensitive information via unspecified vectors.

QNAP QTS versions before 4.2.4 Build 20170313 allow attackers to gain administrator privileges and execute arbitrary commands via unspecified vectors.

A command injection vulnerability has been reported in several QNAP operating system versions. A remote attacker with an administrator account can exploit it to execute arbitrary commands. The issue has been fixed in newer QTS and QuTS hero versions.

A path traversal vulnerability has been reported in several QNAP operating system versions. A remote attacker with an administrator account can read unexpected files or system data.

A command injection vulnerability has been reported in several QNAP operating system versions. A remote attacker with an administrator account can exploit it to execute arbitrary commands. The issue has been fixed in newer QTS and QuTS hero versions.

A buffer overflow vulnerability in QNAP operating systems. A remote attacker with an administrator account can modify memory or crash processes. Fixed in QTS 5.2.8.3332 build 20251128 and later.

A buffer overflow vulnerability affects several QNAP operating system versions. If a remote attacker gains an administrator account, they can exploit the vulnerability to modify memory or crash processes. Fixed in QTS 5.2.8.3332 build 20251128 and later.

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. An attacker can exploit the vulnerability to launch a denial-of-service (DoS) attack. It has been fixed in QTS 5.2.5.3145 build 20250526 and later, and QuTS hero h5.2.5.3138 build 20250519 and later.

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. An attacker can exploit the vulnerability to launch a denial-of-service (DoS) attack. It has been fixed in QTS 5.2.5.3145 build 20250526 and later, and QuTS hero h5.2.5.3138 build 20250519 and later.

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. Fixed in QTS 5.2.5.3145 and QuTS hero h5.2.5.3138.

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. Fixed in QTS 5.2.5.3145 and QuTS hero h5.2.5.3138.

A buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account, they can then exploit the vulnerability to modify memory or crash processes. Fixed in QTS 5.2.5.3145 and QuTS hero h5.2.5.3138.