CVE-2024-27124: QTS, QuTS hero, QuTScloud
An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to execute commands via a network.
We have already fixed the vulnerability in the following versions: QTS 5.1.3.2578 build 20231110 and later QTS 4.5.4.2627 build 20231225 and later QuTS hero h5.1.3.2578 build 20231110 and later QuTS hero h4.5.4.2626 build 20231225 and later QuTScloud c5.1.5.2651 and later
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2024-27124?
CVE-2024-27124 has been classified with a high severity due to its potential for OS command injection.
How do I fix CVE-2024-27124?
To fix CVE-2024-27124, upgrade your QNAP operating system to version QTS 5.1.3.2578 or higher.
Which QNAP operating system versions are affected by CVE-2024-27124?
CVE-2024-27124 affects several versions of QNAP QTS, QuTS hero, and QuTScloud prior to the specified patched versions.
What risks are associated with CVE-2024-27124 if exploited?
Exploitation of CVE-2024-27124 could allow attackers to execute arbitrary commands on affected systems via the network.
Is there an emergency patch available for CVE-2024-27124?
Yes, QNAP has released an emergency patch to address CVE-2024-27124 in the latest versions of their operating systems.