Multiple vulnerabilities in QNAP QTS and QuTS hero
| Risk | Low |
| Patch available | YES |
| Number of vulnerabilities | 2 |
| CVE-ID | CVE-2024-32771 CVE-2023-39298 |
| CWE-ID | CWE-307 CWE-285 |
| Exploitation vector | Network |
| Public exploit | N/A |
| Vulnerable software Subscribe |
QNAP QTS Server applications / File servers (FTP/HTTP) QuTS hero Hardware solutions / Firmware |
| Vendor |
Security Bulletin
This security bulletin contains information about 2 vulnerabilities.
1) Improper Restriction of Excessive Authentication Attempts
EUVDB-ID: #VU96961
Risk: Low
CVSSv3.1: 4.3 [CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C]
CVE-ID: CVE-2024-32771
CWE-ID:
CWE-307 - Improper Restriction of Excessive Authentication Attempts
Exploit availability: No
DescriptionThe vulnerability allows a remote user to compromise the target system.
The vulnerability exists due to improper restriction of excessive authentication attempts. A remote administrator can conduct brute force attacks and gain privileged access.
MitigationInstall updates from vendor's website.
Vulnerable software versionsQNAP QTS: before 5.2.0.2782 20240601
QuTS hero: before h5.2.0.2782 build 20240601
External linkshttp://www.qnap.com/en/security-advisory/qsa-24-28
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
2) Improper Authorization
EUVDB-ID: #VU96962
Risk: Low
CVSSv3.1: 6.2 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2023-39298
CWE-ID:
CWE-285 - Improper Authorization
Exploit availability: No
DescriptionThe vulnerability allows a local user to bypass authorization checks.
The vulnerability exists due to a missing capability check on several AJAX actions. A local user can access data or perform actions without the proper privileges.
MitigationInstall updates from vendor's website.
Vulnerable software versionsQNAP QTS: before 5.2.0.2782 20240601
QuTS hero: before h5.2.0.2782 build 20240601
External linkshttp://www.qnap.com/en/security-advisory/qsa-24-28
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
