CVE-2022-27597
A vulnerability has been reported to affect QNAP operating systems. If exploited, the out-of-bounds read vulnerability allows remote authenticated administrators to get secret values. The vulnerability affects the following QNAP operating systems: QTS, QuTS hero, QuTScloud, QVP (QVR Pro appliances) We have already fixed the vulnerability in the following versions: QTS 5.0.1.2346 build 20230322 and later QuTS hero h5.0.1.2348 build 20230324 and later
- Score
- CVSS 3.1 2.7 Low
- Status
- Modified - security@qnapsecurity.com.tw
- Published
- 2023-03-29
- Last modified
- 2025-02-12
- Weaknesses
- CWE-125, CWE-1295, CWE-489
Affected products
- Qts (Qnap)
- Quts Hero (Qnap)
- Qutscloud (Qnap)
- Qvp-21a Firmware (Qnap)
- Qvp-41a Firmware (Qnap)
- Qvp-41b Firmware (Qnap)
- Qvp-63a Firmware (Qnap)
- Qvp-63b Firmware (Qnap)
- Qvp-85a Firmware (Qnap)
- Qvp-85b Firmware (Qnap)
- Qvr (Qnap)
- Qts (Qnap Systems Inc.)
- Quts Hero (Qnap Systems Inc.)
References
- https://www.qnap.com/en/security-advisory/qsa-23-06