PT-2025-24291 · Qnap · Qnap Quts Hero+1

Published 2025-06-06 · Updated 2025-06-09 · CVE-2024-56805

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L

Name of the Vulnerable Software and Affected Versions QNAP QTS versions prior to 5.2.4.3079 build 20250321 QNAP QuTS hero versions prior to h5.2.4.3079 build 20250321

Description A buffer overflow issue has been reported, affecting several QNAP operating system versions. If exploited, this could allow remote attackers who have gained user access to modify memory or crash processes.

Recommendations For QNAP QTS versions prior to 5.2.4.3079 build 20250321, update to QTS 5.2.4.3079 build 20250321 or later. For QNAP QuTS hero versions prior to h5.2.4.3079 build 20250321, update to QuTS hero h5.2.4.3079 build 20250321 or later.

Fix

Heap Based Buffer Overflow

Buffer Overflow

Weakness Enumeration

CWE-122

CWE-120

Related Identifiers

CVE-2024-56805

Affected Products

Qnap Qts

Qnap Quts Hero

References · 5

• https://qnap.com/en/security-advisory/qsa-25-12 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-56805 · Security Note
• https://osv.dev/vulnerability/CVE-2024-56805 · Vendor Advisory
• https://twitter.com/CVEnew/status/1931037249631572349 · Twitter Post
• https://t.me/cvenotify/125078 · Telegram Post