Information disclosure in QNAP QTS
Priority LOW 35CWE-200Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Information disclosure
- Confidentiality · integrity · availability
- High · High · None
- Fix status
- Fixed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-200.
Summary
An incorrect permission assignment for critical resource vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users to read or modify the resource via a network. We have already fixed the vulnerability in the following version: QTS 5.1.7.2770 build 20240520 and later QuTS hero h5.1.7.2770 build 20240520 and later
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00353 29th percentileScored 2026-11-07
Fix Fixed QTS (QNAP Systems Inc.): 5.1.7.2770 build 20240520QuTS hero (QNAP Systems Inc.): h5.1.7.2770 build 20240520
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| QNAP | QTS | 5.1.x to before 5.1.7.2770 build 20240520 | 5.1.7.2770 build 20240520 | Patch available | CNA |
| QNAP | QuTS hero | h5.1.x to before h5.1.7.2770 build 20240520 | h5.1.7.2770 build 20240520 | Patch available | CNA |
- QTS VendorQNAP Affected 5.1.x to before 5.1.7.2770 build 20240520 Fixed in 5.1.7.2770 build 20240520 Patch available CNA
- QuTS hero VendorQNAP Affected h5.1.x to before h5.1.7.2770 build 20240520 Fixed in h5.1.7.2770 build 20240520 Patch available CNA
CPE configurations NVD · 23
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:qnap:qts:5.1.0.2348:build_20230325:*:*:*:*:*:* | 5.1.0.2348 build_20230325 | Vulnerable | QNAP |
| cpe:2.3:o:qnap:qts:5.1.0.2399:build_20230515:*:*:*:*:*:* | 5.1.0.2399 build_20230515 | Vulnerable | QNAP |
| cpe:2.3:o:qnap:qts:5.1.0.2418:build_20230603:*:*:*:*:*:* | 5.1.0.2418 build_20230603 | Vulnerable | QNAP |
| cpe:2.3:o:qnap:qts:5.1.0.2444:build_20230629:*:*:*:*:*:* | 5.1.0.2444 build_20230629 | Vulnerable | QNAP |
| cpe:2.3:o:qnap:qts:5.1.0.2466:build_20230721:*:*:*:*:*:* | 5.1.0.2466 build_20230721 | Vulnerable | QNAP |
| cpe:2.3:o:qnap:qts:5.1.1.2491:build_20230815:*:*:*:*:*:* | 5.1.1.2491 build_20230815 | Vulnerable | QNAP |
| cpe:2.3:o:qnap:qts:5.1.2.2533:build_20230926:*:*:*:*:*:* | 5.1.2.2533 build_20230926 | Vulnerable | QNAP |
| cpe:2.3:o:qnap:qts:5.1.3.2578:build_20231110:*:*:*:*:*:* | 5.1.3.2578 build_20231110 | Vulnerable | QNAP |
| cpe:2.3:o:qnap:qts:5.1.4.2596:build_20231128:*:*:*:*:*:* | 5.1.4.2596 build_20231128 | Vulnerable | QNAP |
| cpe:2.3:o:qnap:qts:5.1.5.2645:build_20240116:*:*:*:*:*:* | 5.1.5.2645 build_20240116 | Vulnerable | QNAP |
- cpe:2.3:o:qnap:qts:5.1.0.2348:build_20230325:*:*:*:*:*:* Versions 5.1.0.2348 build_20230325 Vulnerable ·QNAP
- cpe:2.3:o:qnap:qts:5.1.0.2399:build_20230515:*:*:*:*:*:* Versions 5.1.0.2399 build_20230515 Vulnerable ·QNAP
- cpe:2.3:o:qnap:qts:5.1.0.2418:build_20230603:*:*:*:*:*:* Versions 5.1.0.2418 build_20230603 Vulnerable ·QNAP
- cpe:2.3:o:qnap:qts:5.1.0.2444:build_20230629:*:*:*:*:*:* Versions 5.1.0.2444 build_20230629 Vulnerable ·QNAP
- cpe:2.3:o:qnap:qts:5.1.0.2466:build_20230721:*:*:*:*:*:* Versions 5.1.0.2466 build_20230721 Vulnerable ·QNAP
- cpe:2.3:o:qnap:qts:5.1.1.2491:build_20230815:*:*:*:*:*:* Versions 5.1.1.2491 build_20230815 Vulnerable ·QNAP
- cpe:2.3:o:qnap:qts:5.1.2.2533:build_20230926:*:*:*:*:*:* Versions 5.1.2.2533 build_20230926 Vulnerable ·QNAP
- cpe:2.3:o:qnap:qts:5.1.3.2578:build_20231110:*:*:*:*:*:* Versions 5.1.3.2578 build_20231110 Vulnerable ·QNAP
- cpe:2.3:o:qnap:qts:5.1.4.2596:build_20231128:*:*:*:*:*:* Versions 5.1.4.2596 build_20231128 Vulnerable ·QNAP
- cpe:2.3:o:qnap:qts:5.1.5.2645:build_20240116:*:*:*:*:*:* Versions 5.1.5.2645 build_20240116 Vulnerable ·QNAP
Show 13 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:qnap:qts:5.1.5.2679:build_20240219:*:*:*:*:*:* | 5.1.5.2679 build_20240219 | Vulnerable | QNAP |
| cpe:2.3:o:qnap:qts:5.1.6.2722:build_20240402:*:*:*:*:*:* | 5.1.6.2722 build_20240402 | Vulnerable | QNAP |
| cpe:2.3:o:qnap:quts_hero:h5.1.0.2409:build_20230525:*:*:*:*:*:* | h5.1.0.2409 build_20230525 | Vulnerable | QNAP |
| cpe:2.3:o:qnap:quts_hero:h5.1.0.2424:build_20230609:*:*:*:*:*:* | h5.1.0.2424 build_20230609 | Vulnerable | QNAP |
| cpe:2.3:o:qnap:quts_hero:h5.1.0.2453:build_20230708:*:*:*:*:*:* | h5.1.0.2453 build_20230708 | Vulnerable | QNAP |
| cpe:2.3:o:qnap:quts_hero:h5.1.0.2466:build_20230721:*:*:*:*:*:* | h5.1.0.2466 build_20230721 | Vulnerable | QNAP |
| cpe:2.3:o:qnap:quts_hero:h5.1.1.2488:build_20230812:*:*:*:*:*:* | h5.1.1.2488 build_20230812 | Vulnerable | QNAP |
| cpe:2.3:o:qnap:quts_hero:h5.1.2.2534:build_20230927:*:*:*:*:*:* | h5.1.2.2534 build_20230927 | Vulnerable | QNAP |
| cpe:2.3:o:qnap:quts_hero:h5.1.3.2578:build_20231110:*:*:*:*:*:* | h5.1.3.2578 build_20231110 | Vulnerable | QNAP |
| cpe:2.3:o:qnap:quts_hero:h5.1.4.2596:build_20231128:*:*:*:*:*:* | h5.1.4.2596 build_20231128 | Vulnerable | QNAP |
| cpe:2.3:o:qnap:quts_hero:h5.1.5.2647:build_20240118:*:*:*:*:*:* | h5.1.5.2647 build_20240118 | Vulnerable | QNAP |
| cpe:2.3:o:qnap:quts_hero:h5.1.5.2680:build_20240220:*:*:*:*:*:* | h5.1.5.2680 build_20240220 | Vulnerable | QNAP |
| cpe:2.3:o:qnap:quts_hero:h5.1.6.2734:build_20240414:*:*:*:*:*:* | h5.1.6.2734 build_20240414 | Vulnerable | QNAP |
- cpe:2.3:o:qnap:qts:5.1.5.2679:build_20240219:*:*:*:*:*:* Versions 5.1.5.2679 build_20240219 Vulnerable ·QNAP
- cpe:2.3:o:qnap:qts:5.1.6.2722:build_20240402:*:*:*:*:*:* Versions 5.1.6.2722 build_20240402 Vulnerable ·QNAP
- cpe:2.3:o:qnap:quts_hero:h5.1.0.2409:build_20230525:*:*:*:*:*:* Versions h5.1.0.2409 build_20230525 Vulnerable ·QNAP
- cpe:2.3:o:qnap:quts_hero:h5.1.0.2424:build_20230609:*:*:*:*:*:* Versions h5.1.0.2424 build_20230609 Vulnerable ·QNAP
- cpe:2.3:o:qnap:quts_hero:h5.1.0.2453:build_20230708:*:*:*:*:*:* Versions h5.1.0.2453 build_20230708 Vulnerable ·QNAP
- cpe:2.3:o:qnap:quts_hero:h5.1.0.2466:build_20230721:*:*:*:*:*:* Versions h5.1.0.2466 build_20230721 Vulnerable ·QNAP
- cpe:2.3:o:qnap:quts_hero:h5.1.1.2488:build_20230812:*:*:*:*:*:* Versions h5.1.1.2488 build_20230812 Vulnerable ·QNAP
- cpe:2.3:o:qnap:quts_hero:h5.1.2.2534:build_20230927:*:*:*:*:*:* Versions h5.1.2.2534 build_20230927 Vulnerable ·QNAP
- cpe:2.3:o:qnap:quts_hero:h5.1.3.2578:build_20231110:*:*:*:*:*:* Versions h5.1.3.2578 build_20231110 Vulnerable ·QNAP
- cpe:2.3:o:qnap:quts_hero:h5.1.4.2596:build_20231128:*:*:*:*:*:* Versions h5.1.4.2596 build_20231128 Vulnerable ·QNAP
- cpe:2.3:o:qnap:quts_hero:h5.1.5.2647:build_20240118:*:*:*:*:*:* Versions h5.1.5.2647 build_20240118 Vulnerable ·QNAP
- cpe:2.3:o:qnap:quts_hero:h5.1.5.2680:build_20240220:*:*:*:*:*:* Versions h5.1.5.2680 build_20240220 Vulnerable ·QNAP
- cpe:2.3:o:qnap:quts_hero:h5.1.6.2734:build_20240414:*:*:*:*:*:* Versions h5.1.6.2734 build_20240414 Vulnerable ·QNAP
Remediation
- Fix · CNA QTS (QNAP Systems Inc.) Fixed in 5.1.7.2770 build 20240520
- Fix · CNA QuTS hero (QNAP Systems Inc.) Fixed in h5.1.7.2770 build 20240520
Fixed in the same release
Records fixed by the same vendor advisory or release, as the CNA lists them.
- Release ·
QNAP Systems QTS, QuTS hero 5.1.7.2770 build 20240520, h5.1.7.2770 build 20240520
5 records Highest priority Priority HIGH 1 HIGH, 2 MEDIUM, 2 LOW
Other records, highest priority first
- TI-2024-17986 Buffer overflow in QNAP QTSPriority HIGH 73
- TI-2024-17983 Double free in QNAP QTSPriority MEDIUM 47
- TI-2024-17984 Buffer overflow in QNAP QTSPriority MEDIUM 41
Timeline
- 2026-10-02 Threatist record created from CVE-2024-21902
- 2026-10-03 Alias added: GHSA-v7qq-vfrc-p9vr
References
More QNAP Qts vulnerabilities
- TI-2020-02221 Command Injection Vulnerability in QTS and QuTS hero KEVCVSS 3.1CRITICAL 9.8
- TI-2019-05101 Improper input validation in QNAP NAS devices KEVCVSS 3.1CRITICAL 9.8
- TI-2018-14137 Improper input validation in QNAP QTS KEVCVSS 3.1CRITICAL 9.8
- TI-2014-05975 GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed… KEVCVSS 3.1CRITICAL 9.8
- TI-2014-05157 GNU Bash through 4.3 processes trailing strings after function definitions in the values… KEVCVSS 3.1CRITICAL 9.8
- TI-2018-14131 Cross-site scripting in QNAP QTS KEVCVSS 3.1HIGH 8.0
Sources
- CVE-2024-21902 · CVE Program
- CVE-2024-21902 · NVD
- FIRST EPSS
- GHSA-v7qq-vfrc-p9vr · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences