QNAP NAS Multiple Vulnerabilities

Multiple vulnerabilities were identified in QNAP NAS. A remote attacker could exploit some of these vulnerabilities to trigger remote code execution, security restriction bypass, sensitive information disclosure and data manipulation on the targeted system.

Note:

Proof of concept exploit for CVE-2024-27130 exists on the internet. CVE-2024-27130 required an authenticated user to execute arbitrary code via a network. Hence, the overall risk level is medium.