CVE-2020-2501: Stack Buffer Overflow in Surveillance Station
First published: Wed Feb 17 2021(Updated: )
A stack-based buffer overflow vulnerability has been reported to affect QNAP NAS devices running Surveillance Station. If exploited, this vulnerability allows attackers to execute arbitrary code. QNAP have already fixed this vulnerability in the following versions: Surveillance Station 5.1.5.4.3 (and later) for ARM CPU NAS (64bit OS) and x86 CPU NAS (64bit OS) Surveillance Station 5.1.5.3.3 (and later) for ARM CPU NAS (32bit OS) and x86 CPU NAS (32bit OS)
Credit: security@qnapsecurity.com.tw
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Qnap Surveillance Station | <5.1.5.3.3 | |
| Qnap Surveillance Station | >=5.1.5.4.0<5.1.5.4.3 | |
| QNAP NAS |
Remedy
QNAP have already fixed this vulnerability in the following versions: Surveillance Station 5.1.5.4.3 (and later) for ARM CPU NAS (64bit OS) and x86 CPU NAS (64bit OS) Surveillance Station 5.1.5.3.3 (and later) for ARM CPU NAS (32bit OS) and x86 CPU NAS (32bit OS)
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2020-2501?
CVE-2020-2501 is a stack-based buffer overflow vulnerability that affects QNAP NAS devices running Surveillance Station.
How does CVE-2020-2501 affect QNAP NAS devices?
If exploited, CVE-2020-2501 allows attackers to execute arbitrary code on QNAP NAS devices running Surveillance Station.
Which versions of Surveillance Station are affected by CVE-2020-2501?
Surveillance Station versions up to and including 5.1.5.3.3 are affected by CVE-2020-2501.
How can I fix CVE-2020-2501?
QNAP has already fixed CVE-2020-2501 in Surveillance Station version 5.1.5.4.3. Update to this version to fix the vulnerability.
Where can I find more information about CVE-2020-2501?
More information about CVE-2020-2501 can be found at the following reference: https://www.qnap.com/en/security-advisory/qsa-21-07
- agent/type
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/title
- agent/last-modified-date
- agent/severity
- agent/remedy
- agent/softwarecombine
- agent/author
- agent/references
- agent/description
- agent/first-publish-date
- agent/event
- agent/tags
- vendor/qnap
- canonical/qnap surveillance station
- version/qnap surveillance station/5.1.5.4.0
- canonical/qnap nas