Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: QNAP Systems QuTS hero h4.5.4.1771 build 20210825 Clear all filters
TI-2021-13385 CVE-2021-34343 · GHSA-h5w8-c4g8-8ch6

Buffer Overflow Vulnerability in QTS, QuTS hero, and QuTScloud

Priority LOW 36

A stack buffer overflow vulnerability has been reported to affect QNAP device running QTS, QuTScloud, QuTS hero.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.0195 Published 2021-09-10 Fixed in 4.5.4.1715 build 20210630, 5.0.0.1716 build 20210701 +2 CWE-787
TI-2021-09807 CVE-2021-28816 · GHSA-pp5r-cwfq-7whf

Stack Buffer Overflow Vulnerabilities in QTS, QuTS hero, and QuTScloud

Priority MEDIUM 40

A stack buffer overflow vulnerability has been reported to affect QNAP device running QTS, QuTScloud, QuTS hero.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00928 Published 2021-09-10 Fixed in 4.5.4.1715 build 20210630, 5.0.0.1716 build 20210701 +4 CWE-787
TI-2018-14145 CVE-2018-19957 · GHSA-fcwx-wvr2-2xm2

Insufficient HTTP Security Headers in QTS, QuTS hero, and QuTScloud

Priority LOW 28

A vulnerability involving insufficient HTTP security headers has been reported to affect QNAP NAS running QTS, QuTS hero, and QuTScloud.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00707 Published 2021-09-10 Fixed in 4.5.4.1715 build 20210630, h4.5.4.1771 build 20210825 +1 CWE-1021