Known vulnerabilities in QNAP QTS 5.0.0.1900 Build 20211228

Software: QNAP QTS
Version: 5.0.0.1900 Build 20211228
Software CPE: cpe:2.3:a:qnap_systems:qnap_qts:*:*:*:*:*:*:*:*
Total vulnerabilities: 30
Public exploits: 6
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting QNAP QTS version 5.0.0.1900 Build 20211228 QNAP QTS 5.0.0.1900 Build 20211228 is affected by 30 vulnerabilities: 10 high, 15 medium, 5 low Critical High Medium Low

Vulnerabilities (30)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU130763 - Resource Management Errors
CVE-2026-43284
CWE-399 High
Public exploit available
Exploited
- 08.05.2026 SB20260508111
SB20260508120
SB20260508121
and 72 more
#VU130759 - Resource Management Errors
CVE-2026-43500
CWE-399 High
Public exploit available
Exploited
- 08.05.2026 SB20260508108
SB20260508120
SB20260508121
and 32 more
#VU93513 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2024-6387
CWE-362 High
Public exploit available
No
- 01.07.2024 SB2024070144
SB2024070145
SB2024070152
and 89 more
#VU86371 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-50358
CWE-78 High
No
Exploited
4.2.6 20240131, 4.3.3.2644 20240131, 4.3.4.2675 20240131, 4.3.6.2665 20240131, 4.5.4.2627 20231225, 5.1.5.2645 20240116 13.02.2024 SB2024021313
#VU86370 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-47218
CWE-78 Medium
Public exploit available
No
4.2.6 20240131, 4.3.3.2644 20240131, 4.3.4.2675 20240131, 4.3.6.2665 20240131, 4.5.4.2627 20231225, 5.1.5.2645 20240116 13.02.2024 SB2024021313
#VU71996 - Double Free
CVE-2022-4450
CWE-415 Medium
No
No
5.0.1.2346 20230322 07.02.2023 SB2023020742
SB2023020748
SB2023020771
and 180 more
#VU71995 - Use After Free
CVE-2023-0215
CWE-416 Medium
No
No
5.0.1.2346 20230322 07.02.2023 SB2023020742
SB2023020747
SB2023020748
and 209 more
#VU71993 - Information Exposure Through Timing Discrepancy
CVE-2022-4304
CWE-208 Medium
No
No
5.0.1.2346 20230322 07.02.2023 SB2023020742
SB2023020748
SB2023020767
and 222 more
#VU71992 - Type confusion
CVE-2023-0286
CWE-843 High
No
No
5.0.1.2346 20230322 07.02.2023 SB2023020742
SB2023020747
SB2023020748
and 223 more
#VU65827 - Use After Free
CVE-2022-32746
CWE-416 Low
No
No
4.5.4.2125 20220810, 5.0.0.2131 20220815 27.07.2022 SB2022072721
SB2022072728
SB2022072922
and 30 more
#VU65826 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-32745
CWE-835 Medium
No
No
4.5.4.2125 20220810, 5.0.0.2131 20220815 27.07.2022 SB2022072721
SB2022072728
SB2022072922
and 19 more
#VU65825 - Permissions, Privileges, and Access Controls
CVE-2022-32744
CWE-264 Low
No
No
4.5.4.2125 20220810, 5.0.0.2131 20220815 27.07.2022 SB2022072721
SB2022072728
SB2022072922
and 20 more
#VU65824 - Missing release of memory after effective lifetime
CVE-2022-32742
CWE-401 Low
No
No
4.5.4.2125 20220810, 5.0.0.2131 20220815 27.07.2022 SB2022072721
SB2022072728
SB2022072922
and 36 more
#VU65820 - Permissions, Privileges, and Access Controls
CVE-2022-2031
CWE-264 Medium
No
No
4.5.4.2125 20220810, 5.0.0.2131 20220815 27.07.2022 SB2022072721
SB2022072728
SB2022072922
and 15 more
#VU64089 - Improper Authentication
CVE-2022-31813
CWE-287 Medium
No
No
4.5.4.2125 20220810, 5.0.0.2131 20220815 08.06.2022 SB2022060817
SB2022060901
SB2022061611
and 49 more
#VU64088 - Out-of-bounds read
CVE-2022-30556
CWE-125 Medium
No
No
4.5.4.2125 20220810, 5.0.0.2131 20220815 08.06.2022 SB2022060817
SB2022060901
SB2022061611
and 31 more
#VU64086 - Resource exhaustion
CVE-2022-30522
CWE-400 Medium
No
No
4.5.4.2125 20220810, 5.0.0.2131 20220815 08.06.2022 SB2022060817
SB2022060901
SB2022061723
and 31 more
#VU64085 - Improper input validation
CVE-2022-29404
CWE-20 Medium
No
No
4.5.4.2125 20220810, 5.0.0.2131 20220815 08.06.2022 SB2022060817
SB2022060901
SB2022061611
and 30 more
#VU64083 - Out-of-bounds read
CVE-2022-28615
CWE-125 Low
No
No
4.5.4.2125 20220810, 5.0.0.2131 20220815 08.06.2022 SB2022060817
SB2022060901
SB2022061611
and 41 more
#VU64081 - Out-of-bounds read
CVE-2022-28614
CWE-125 Low
No
No
4.5.4.2125 20220810, 5.0.0.2131 20220815 08.06.2022 SB2022060817
SB2022060901
SB2022061611
and 36 more


Showing elements 1 - 20 out of 30