← CVE Intelligence

CVE-2024-21902

QTS, QuTS hero PUBLISHED

Description (CNA)

An incorrect permission assignment for critical resource vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users to read or modify the resource via a network. We have already fixed the vulnerability in the following version: QTS 5.1.7.2770 build 20240520 and later QuTS hero h5.1.7.2770 build 20240520 and later

Affected (CNA)

Vendor / productVersions
QNAP Systems Inc. / QTSaffected 5.1.x before 5.1.7.2770 build 20240520
QNAP Systems Inc. / QuTS heroaffected h5.1.x before h5.1.7.2770 build 20240520

CWE

CWE-732, CWE-200

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.