CVEvulnerability

CVE-2022-27600

7.5 HIGH Published 2024-12-19 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2024-12-19
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.8 MEDIUM — CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-400, CWE-798

Description

An uncontrolled resource consumption vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following versions: QTS 5.0.1.2277 and later QTS 4.5.4.2280 build 20230112 and later QuTS hero h5.0.1.2277 build 20230112 and later QuTS hero h4.5.4.2374 build 20230417 and later QuTScloud c5.0.1.2374 and later

Affected configurations

• qnap qts (>= 4.5.1 < 4.5.4.2280) • qnap qts (>= 5.0.0 < 5.0.1.2277) • qnap qts 4.5.4.2280 • qnap qts 5.0.1.2277 • qnap quts hero (>= h4.5.1 < h4.5.4.2374) • qnap quts hero (>= h5.0 < h5.0.1.2277) • qnap quts hero h4.5.4.2374 • qnap quts hero h5.0.1.2277 • qnap qutscloud (>= c5.0.1 < c5.0.1.2374)

Related

Weakness · CWE (2)

  • CWE-400 Uncontrolled Resource Consumption weakness
  • CWE-798 Use of Hard-coded Credentials weakness

References