CVE-2020-2501: Stack Buffer Overflow in Surveillance Station
A stack-based buffer overflow vulnerability has been reported to affect QNAP NAS devices running Surveillance Station. If exploited, this vulnerability allows attackers to execute arbitrary code. QNAP have already fixed this vulnerability in the following versions: Surveillance Station 5.1.5.4.3 (and later) for ARM CPU NAS (64bit OS) and x86 CPU NAS (64bit OS) Surveillance Station 5.1.5.3.3 (and later) for ARM CPU NAS (32bit OS) and x86 CPU NAS (32bit OS)
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is CVE-2020-2501?
CVE-2020-2501 is a stack-based buffer overflow vulnerability that affects QNAP NAS devices running Surveillance Station.
How does CVE-2020-2501 affect QNAP NAS devices?
If exploited, CVE-2020-2501 allows attackers to execute arbitrary code on QNAP NAS devices running Surveillance Station.
Which versions of Surveillance Station are affected by CVE-2020-2501?
Surveillance Station versions up to and including 5.1.5.3.3 are affected by CVE-2020-2501.
How can I fix CVE-2020-2501?
QNAP has already fixed CVE-2020-2501 in Surveillance Station version 5.1.5.4.3. Update to this version to fix the vulnerability.
Where can I find more information about CVE-2020-2501?
More information about CVE-2020-2501 can be found at the following reference: https://www.qnap.com/en/security-advisory/qsa-21-07