Known vulnerabilities in QuTS hero h5.0.0.2069 Build 20220614
Vendor:
QNAP Systems, Inc.
Software:
QuTS hero
Version:
h5.0.0.2069 Build 20220614
Software CPE:
cpe:2.3:h:qnap_systems:quts-hero:*:*:*:*:*:*:*:*
Website:
https://www.qnap.com
Total vulnerabilities:
22
Public exploits:
5
Known exploited (KEV):
3
Highest CVSSv4 Score:
9.4
Vulnerabilities by Severity
h5.2.9
h5.2.8
h4.5.0.1409 build 20200829
h4.5.0.1352 build 20200703
h4.5.0.1308 build 20200520
h4.5.0.1279 build 20200421
h4.5.4.2956 build 20241119
h4.5.4.2790 build 20240606
h4.5.4.2626 build 20231225
h4.5.4.2476 build 20230728
h4.5.4.2374 build 20230417
h4.5.4.2272 build 20230105
h4.5.4.2217 build 20221111
h4.5.4.2138 build 20220824
h4.5.4.2052 build 20220530
h4.5.4.1991 build 20220330
h4.5.4.1971 build 20220310
h4.5.4.1951 build 20220218
h4.5.4.1892 build 20211223
h4.5.4.1848 build 20211109
h4.5.4.1813 build 20211006
h4.5.4.1800 build 20210923
h4.5.4.1771 build 20210825
h5.0.1.2515 build 20230907
h5.0.1.2376 build 20230421
h5.0.1.2348 build 20230324
h5.0.1.2277 build 20230112
h5.0.1.2269 build 20230104
h5.0.1.2248 build 20221215
h5.0.1.2192 build 20221020
h5.0.1.2045 build 20220526
h5.0.0.2120 build 20220804
h5.0.0.2069 build 20220614
h5.0.0.2022 build 20220428
h5.0.0.1986 build 20220324
h5.0.0.1949 build 20220215
h5.0.0.1900 build 20211228
h5.0.0.1892 build 20211222
h5.0.0.1856 build 20211117
h5.0.0.1844 build 20211105
h5.0.0.1772 build 20210826
h5.2.8.3350 build 20251216
h5.3.2.3354 build 20251225
h5.3.1.3250 build 20250912
h5.2.8.3321 build 20251117
h5.3.1.3292 build 20251024
h5.2.7.3297 build 20251024
h5.2.7.3256 build 20250913
h5.2.6.3195 build 20250715
h5.3.0.3115 build 20250430
h5.2.5.3138 build 20250519
h5.2.4.3079 build 20250321
h5.2.3.3006 build 20250108
h5.2.0.2851 build 20240808
h5.2.2.2952 build 20241116
h5.1.9.2954 build 20241120
h5.2.1.2929 build 20241025
h5.2.0.2782 build 20240601
h5.1.8.2823 build 20240712
h5.1.7.2770 build 20240520
h5.1.6.2734 build 20240414
h5.1.5.2647 build 20240118
h5.1.4.2596 build 20231128
h5.1.3.2578 build 20231110
h5.1.2.2534 build 20230927
h5.1.1.2488 build 20230812
h5.1.0.2392 build 20230508
h5.0.1
h4.5.4
h5.1.0
h5.1.0.2466 build 20230721
h5.1.0.2453 build 20230708
h5.1.0.2424 build 20230609
h5.1.0.2409 build 20230525
h5.0.0.2131 build 20220815
h5.0.0.2069 Build 20220614
h5.0.0.2022 Build 20220428
h4.5.4.1991 Build 20220330
h5.0.0.1986 Build 20220324
h4.5.4.1971 Build 20220310
h4.5.4.1951 Build 20220218
h5.0.0.1949 Build 20220215
-
h4.5.3
h5.0.0.1900 Build 20211228
h4.5.4.1848 Build 20211109
c5.0.0.1919 build 20220119
h5.0.0.1856 Build 20211117
h5.0.0
h5.0.0.1772 Build 20210826
h4.5.3.1710 build 20210624
h4.5.3.1698 build 20210612
h4.5.3.1697 build 20210611
h4.5.2: 1.12.1012
h4.5.2
h4.5.3.1670 build 20210515
h4.5.1
h4.5.2.1638 build 20210414
h4.5.1.1582 build 20210217
h4.5.1.1491 build 20201119
h4.5.1.1472 build 20201031
Vulnerabilities (22)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU130763 - Resource Management Errors CVE-2026-43284 |
CWE-399 | High | - | 08.05.2026 |
SB20260508111 SB20260508120 SB20260508121 and 72 more |
||
| #VU130759 - Resource Management Errors CVE-2026-43500 |
CWE-399 | High | - | 08.05.2026 |
SB20260508108 SB20260508120 SB20260508121 and 32 more |
||
| #VU93513 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') CVE-2024-6387 |
CWE-362 | High | - | 01.07.2024 |
SB2024070144 SB2024070145 SB2024070152 and 89 more |
||
| #VU86371 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2023-50358 |
CWE-78 | High | h4.5.4.2626 build 20231225, h5.1.5.2647 build 20240118 | 13.02.2024 |
SB2024021313 |
||
| #VU86370 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2023-47218 |
CWE-78 | Medium | h4.5.4.2626 build 20231225, h5.1.5.2647 build 20240118 | 13.02.2024 |
SB2024021313 |
||
| #VU71996 - Double Free CVE-2022-4450 |
CWE-415 | Medium | h5.0.1.2348 build 20230324 | 07.02.2023 |
SB2023020742 SB2023020748 SB2023020771 and 180 more |
||
| #VU71995 - Use After Free CVE-2023-0215 |
CWE-416 | Medium | h5.0.1.2348 build 20230324 | 07.02.2023 |
SB2023020742 SB2023020747 SB2023020748 and 209 more |
||
| #VU71993 - Information Exposure Through Timing Discrepancy CVE-2022-4304 |
CWE-208 | Medium | h5.0.1.2348 build 20230324 | 07.02.2023 |
SB2023020742 SB2023020748 SB2023020767 and 222 more |
||
| #VU71992 - Type confusion CVE-2023-0286 |
CWE-843 | High | h5.0.1.2348 build 20230324 | 07.02.2023 |
SB2023020742 SB2023020747 SB2023020748 and 223 more |
||
| #VU65827 - Use After Free CVE-2022-32746 |
CWE-416 | Low | h4.5.4.2138 build 20220824, h5.0.0.2131 build 20220815 | 27.07.2022 |
SB2022072721 SB2022072728 SB2022072922 and 30 more |
||
| #VU65826 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2022-32745 |
CWE-835 | Medium | h4.5.4.2138 build 20220824, h5.0.0.2131 build 20220815 | 27.07.2022 |
SB2022072721 SB2022072728 SB2022072922 and 19 more |
||
| #VU65825 - Permissions, Privileges, and Access Controls CVE-2022-32744 |
CWE-264 | Low | h4.5.4.2138 build 20220824, h5.0.0.2131 build 20220815 | 27.07.2022 |
SB2022072721 SB2022072728 SB2022072922 and 20 more |
||
| #VU65824 - Missing release of memory after effective lifetime CVE-2022-32742 |
CWE-401 | Low | h4.5.4.2138 build 20220824, h5.0.0.2131 build 20220815 | 27.07.2022 |
SB2022072721 SB2022072728 SB2022072922 and 36 more |
||
| #VU65820 - Permissions, Privileges, and Access Controls CVE-2022-2031 |
CWE-264 | Medium | h4.5.4.2138 build 20220824, h5.0.0.2131 build 20220815 | 27.07.2022 |
SB2022072721 SB2022072728 SB2022072922 and 15 more |
||
| #VU64089 - Improper Authentication CVE-2022-31813 |
CWE-287 | Medium | - | 08.06.2022 |
SB2022060817 SB2022060901 SB2022061611 and 49 more |
||
| #VU64088 - Out-of-bounds read CVE-2022-30556 |
CWE-125 | Medium | - | 08.06.2022 |
SB2022060817 SB2022060901 SB2022061611 and 31 more |
||
| #VU64086 - Resource exhaustion CVE-2022-30522 |
CWE-400 | Medium | - | 08.06.2022 |
SB2022060817 SB2022060901 SB2022061723 and 31 more |
||
| #VU64085 - Improper input validation CVE-2022-29404 |
CWE-20 | Medium | - | 08.06.2022 |
SB2022060817 SB2022060901 SB2022061611 and 30 more |
||
| #VU64083 - Out-of-bounds read CVE-2022-28615 |
CWE-125 | Low | - | 08.06.2022 |
SB2022060817 SB2022060901 SB2022061611 and 41 more |
||
| #VU64081 - Out-of-bounds read CVE-2022-28614 |
CWE-125 | Low | - | 08.06.2022 |
SB2022060817 SB2022060901 SB2022061611 and 36 more |
Showing elements 1 - 20 out of 22