PT-2024-19118 · Qnap · Qnap Qts+2

Published 2024-04-26 · Updated 2025-12-05 · CVE-2024-21905

Positive Technologies (AI Summary)

CVSS v3.1

8.2

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H

Name of the Vulnerable Software and Affected Versions QNAP QTS versions prior to 5.1.3.2578 build 20231110 QNAP QuTS hero versions prior to 5.1.3.2578 build 20231110 QNAP QuTScloud versions prior to 5.1.5.2651

Description An integer overflow or wraparound issue has been reported to affect several QNAP operating system versions. If exploited, this could allow users to compromise the security of the system via a network.

Recommendations For QNAP QTS versions prior to 5.1.3.2578 build 20231110, update to QTS 5.1.3.2578 build 20231110 or later. For QNAP QuTS hero versions prior to 5.1.3.2578 build 20231110, update to QuTS hero 5.1.3.2578 build 20231110 or later. For QNAP QuTScloud versions prior to 5.1.5.2651, update to QuTScloud 5.1.5.2651 or later.

Fix

Integer Overflow

Weakness Enumeration

CWE-190

Related Identifiers

CVE-2024-21905

Affected Products

Qnap Qts

Qnap Quts Hero

Qnap Qutscloud

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2024-21905 · Security Note
• https://osv.dev/vulnerability/CVE-2024-21905 · Vendor Advisory
• https://qnap.com/en/security-advisory/qsa-24-16 · Vendor Advisory
• https://twitter.com/VulmonFeeds/status/1783898377144422510 · Twitter Post
• https://t.me/cveNotify/144953 · Telegram Post
• https://twitter.com/CVEnew/status/1783877997755331059 · Twitter Post
• https://twitter.com/linuxpatch/status/1783907033382556093 · Twitter Post