Read the docs
TI-2024-12134 Aliases CVE-2024-13086GHSA-rfr3-g285-rggj

Information disclosure in QNAP QTS

Priority LOW 39CWE-200Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Information disclosure
Confidentiality · integrity · availability
High · None · None
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-200.

Summary

An exposure of sensitive information vulnerability has been reported to affect product. If exploited, the vulnerability could allow remote attackers to compromise the security of the system. We have already fixed the vulnerability in the following version: QTS 5.2.0.2851 build 20240808 and later QuTS hero h5.2.0.2851 build 20240808 and later

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00421 36th percentileScored 2026-11-07
Fix Fixed QTS (QNAP Systems Inc.): QTS 5.2.0.2851 build 20240808QuTS hero (QNAP Systems Inc.): QuTS hero h5.2.0.2851 build 20240808

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
QNAPQTS5.x to before QTS 5.2.0.2851 build 20240808QTS 5.2.0.2851 build 20240808Patch availableCNA
QNAPQuTS heroh5.x to before QuTS hero h5.2.0.2851 build 20240808QuTS hero h5.2.0.2851 build 20240808Patch availableCNA
  • QTS VendorQNAP Affected 5.x to before QTS 5.2.0.2851 build 20240808 Fixed in QTS 5.2.0.2851 build 20240808 Patch available CNA
  • QuTS hero VendorQNAP Affected h5.x to before QuTS hero h5.2.0.2851 build 20240808 Fixed in QuTS hero h5.2.0.2851 build 20240808 Patch available CNA

CPE configurations NVD · 2

CPEVersionsRoleVendor
cpe:2.3:o:qnap:qts:*:*:*:*:*:*:*:*5.0.0 to before 5.2.0.2851VulnerableQNAP
cpe:2.3:o:qnap:quts_hero:*:*:*:*:*:*:*:*h5.0.0 to before h5.2.0.2851VulnerableQNAP
  • cpe:2.3:o:qnap:qts:*:*:*:*:*:*:*:* Versions 5.0.0 to before 5.2.0.2851 Vulnerable ·QNAP
  • cpe:2.3:o:qnap:quts_hero:*:*:*:*:*:*:*:* Versions h5.0.0 to before h5.2.0.2851 Vulnerable ·QNAP

Remediation

  • Fix · CNA QTS (QNAP Systems Inc.) Fixed in QTS 5.2.0.2851 build 20240808
  • Fix · CNA QuTS hero (QNAP Systems Inc.) Fixed in QuTS hero h5.2.0.2851 build 20240808

Timeline

  1. 2026-10-02 Threatist record created from CVE-2024-13086
  2. 2026-10-03 Alias added: GHSA-rfr3-g285-rggj

References

Advisory 1

  • TI-2020-02221 Command Injection Vulnerability in QTS and QuTS hero KEVCVSS 3.1CRITICAL 9.8
  • TI-2019-05101 Improper input validation in QNAP NAS devices KEVCVSS 3.1CRITICAL 9.8
  • TI-2018-14137 Improper input validation in QNAP QTS KEVCVSS 3.1CRITICAL 9.8
  • TI-2014-05975 GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed… KEVCVSS 3.1CRITICAL 9.8
  • TI-2014-05157 GNU Bash through 4.3 processes trailing strings after function definitions in the values… KEVCVSS 3.1CRITICAL 9.8
  • TI-2018-14131 Cross-site scripting in QNAP QTS KEVCVSS 3.1HIGH 8.0
See all 282 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences