Approved changes feed: RSS · Atom

cpe:2.3:a:qnap:quts_hero:h5.1.x:*:*:*:*:*:*:*

part: a version: h5.1.x update: *

VendorQnap (a402dda4-b7da-50eb-b0f8-700e564ee87d)
ProductQuts Hero (c808c21e-6b74-58ae-ac08-bf1b891081da)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-27130 vulnerable 2026-06-08 06:31:27.661628 QTS, QuTS hero
HIGH (7.2)
A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to execute code via a network. We have already fixed the vulnerability in the following version: QTS 5.1.7.2770 build 20240520 and later QuTS hero h5.1.7.2770 build 20240520 and later
Published: 2024-05-21T16:08:46.881Z
Updated: 2024-08-02T00:27:59.262Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-27129 vulnerable 2026-06-08 06:31:27.659081 QTS, QuTS hero
MEDIUM (6.4)
A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users to execute code via a network. We have already fixed the vulnerability in the following version: QTS 5.1.7.2770 build 20240520 and later QuTS hero h5.1.7.2770 build 20240520 and later
Published: 2024-05-21T16:08:40.115Z
Updated: 2024-08-02T00:27:59.066Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-27128 vulnerable 2026-06-08 06:31:27.653204 QTS, QuTS hero
MEDIUM (6.4)
A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users to execute code via a network. We have already fixed the vulnerability in the following version: QTS 5.1.7.2770 build 20240520 and later QuTS hero h5.1.7.2770 build 20240520 and later
Published: 2024-05-21T16:08:34.365Z
Updated: 2024-08-02T00:27:59.337Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-27127 vulnerable 2026-06-08 06:31:27.632663 QTS, QuTS hero
HIGH (7.2)
A double free vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users to execute arbitrary code via a network. We have already fixed the vulnerability in the following version: QTS 5.1.7.2770 build 20240520 and later QuTS hero h5.1.7.2770 build 20240520 and later
Published: 2024-05-21T16:08:29.155Z
Updated: 2024-08-02T00:27:59.797Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-51365 vulnerable 2026-06-08 06:16:17.374561 QTS, QuTS hero, QuTScloud
HIGH (8.7)
A path traversal vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to read the contents of unexpected files and expose sensitive data via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.4.2596 build 20231128 and later QTS 4.5.4.2627 build 20231225 and later QuTS hero h5.1.3.2578 build 20231110 and later QuTS hero h4.5.4.2626 build 20231225 and later QuTScloud c5.1.5.2651 and later
Published: 2024-04-26T15:01:04.335Z
Updated: 2024-08-02T22:32:09.027Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.