← CVE Intelligence

CVE-2022-27600

QTS, QuTS hero, QuTScloud PUBLISHED

Description (CNA)

An uncontrolled resource consumption vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following versions: QTS 5.0.1.2277 and later QTS 4.5.4.2280 build 20230112 and later QuTS hero h5.0.1.2277 build 20230112 and later QuTS hero h4.5.4.2374 build 20230417 and later QuTScloud c5.0.1.2374 and later

Affected (CNA)

Vendor / productVersions
QNAP Systems Inc. / QTSaffected 5.0.x before 5.0.1.2277; affected 4.5.x before 4.5.4.2280 build 20230112
QNAP Systems Inc. / QuTS heroaffected h5.0.x before h5.0.1.2277 build 20230112; affected h4.5.x before h4.5.4.2374 build 20230417
QNAP Systems Inc. / QuTScloudaffected c5.x.x before c5.0.1.2374

CWE

CWE-400, CWE-798

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.