CVE-2024-32765: QTS, QuTS hero
A vulnerability has been reported to affect Network & Virtual Switch. If exploited, the vulnerability could allow local authenticated administrators to gain access to and execute certain functions via unspecified vectors.
We have already fixed the vulnerability in the following versions: QTS 5.1.8.2823 build 20240712 and later QuTS hero h5.1.8.2823 build 20240712 and later
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2024-32765?
The severity of CVE-2024-32765 is currently classified as critical due to its potential to allow local authenticated administrators unauthorized access.
How do I fix CVE-2024-32765?
To fix CVE-2024-32765, upgrade to QNAP QTS version 5.1.9 or higher and QNAP QuTS hero version h5.1.9 or higher.
What systems are affected by CVE-2024-32765?
CVE-2024-32765 affects QNAP QTS versions up to 5.1.8.2823 and QNAP QuTS hero versions up to h5.1.8.2823.
Can CVE-2024-32765 be exploited remotely?
No, CVE-2024-32765 can only be exploited by local authenticated administrators.
Is there a workaround for CVE-2024-32765?
There are no known workarounds for CVE-2024-32765, and users are advised to update their systems to mitigate the risk.