Medium severity6.5NVD Advisory· Published Nov 22, 2024· Updated Jun 17, 2026
CVE-2024-37050
CVE-2024-37050
Description
A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to execute code.
We have already fixed the vulnerability in the following versions: QTS 5.2.1.2930 build 20241025 and later QuTS hero h5.2.1.2929 build 20241025 and later
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
17- Range: QTS 5.2.1.2930 build 20241025 and later, QuTS hero h5.2.1.2929 build 20241025 and later
cpe:2.3:o:qnap:qts:5.2.0.2737:build_20240417:*:*:*:*:*:*+ 6 more
- cpe:2.3:o:qnap:qts:5.2.0.2737:build_20240417:*:*:*:*:*:*
- cpe:2.3:o:qnap:qts:5.2.0.2744:build_20240424:*:*:*:*:*:*
- cpe:2.3:o:qnap:qts:5.2.0.2782:build_20240601:*:*:*:*:*:*
- cpe:2.3:o:qnap:qts:5.2.0.2802:build_20240620:*:*:*:*:*:*
- cpe:2.3:o:qnap:qts:5.2.0.2823:build_20240711:*:*:*:*:*:*
- cpe:2.3:o:qnap:qts:5.2.0.2851:build_20240808:*:*:*:*:*:*
- cpe:2.3:o:qnap:qts:5.2.0.2860:build_20240817:*:*:*:*:*:*
cpe:2.3:o:qnap:quts_hero:h5.2.0.2737:build_20240417:*:*:*:*:*:*+ 6 more
- cpe:2.3:o:qnap:quts_hero:h5.2.0.2737:build_20240417:*:*:*:*:*:*
- cpe:2.3:o:qnap:quts_hero:h5.2.0.2782:build_20240601:*:*:*:*:*:*
- cpe:2.3:o:qnap:quts_hero:h5.2.0.2789:build_20240607:*:*:*:*:*:*
- cpe:2.3:o:qnap:quts_hero:h5.2.0.2802:build_20240620:*:*:*:*:*:*
- cpe:2.3:o:qnap:quts_hero:h5.2.0.2823:build_20240711:*:*:*:*:*:*
- cpe:2.3:o:qnap:quts_hero:h5.2.0.2851:build_20240808:*:*:*:*:*:*
- cpe:2.3:o:qnap:quts_hero:h5.2.0.2860:build_20240817:*:*:*:*:*:*
- Range: 5.2.x
- Range: h5.2.x
Patches
Vulnerability mechanics
References
1- www.qnap.com/en/security-advisory/qsa-24-43nvdVendor Advisory
News mentions
0No linked articles in our index yet.