{"id":"CVE-2024-27130","published":"2024-05-21T16:08:46Z","modified":"2024-08-02T00:27:59Z","title":"QTS, QuTS hero","vendor":"QNAP Systems Inc.","product":"QTS","tier":"core","eol":null,"affectedVersions":[{"vendor":"QNAP Systems Inc.","product":"QTS","versions":[">= 5.1.x, < 5.1.7.2770 build 20240520"]},{"vendor":"QNAP Systems Inc.","product":"QuTS hero","versions":[">= h5.1.x, < h5.1.7.2770 build 20240520"]}],"description":{"text":"A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to execute code via a network.\n\nWe have already fixed the vulnerability in the following version:\nQTS 5.1.7.2770 build 20240520 and later\nQuTS hero h5.1.7.2770 build 20240520 and later","provenance":"source","from":"CVE.org"},"summary":{"text":"A stack-based buffer overflow (CWE-120/CWE-121 class) in QNAP's QTS and QuTS hero operating systems, caused by a buffer copy that does not check the size of its input. An attacker with network access can execute code on an affected system, and the attack requires no authentication or user interaction, with the vulnerable configuration being any affected QTS or QuTS hero release prior to the fixed builds.","provenance":"ai","model":"claude-haiku-5-5","generatedAt":"2026-10-31T22:22:27Z"},"cvss":{"score":7.2,"severity":"HIGH","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:L","provenance":"source","from":"CVE.org CNA"},"epss":{"score":0.3752,"percentile":0.98533,"date":"2026-10-31","provenance":"source"},"kev":null,"vulncheckKev":{"dateAdded":"2024-05-27","exploitedFirstSeen":"2024-05-27","ransomware":false,"evidence":[{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2024-05-27&host_type=src&vulnerability=cve-2024-27130","date":"2024-05-27"},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2024-08-07&host_type=src&vulnerability=cve-2024-27130","date":"2024-08-07"},{"url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2026-09-10&host_type=src&vulnerability=cve-2024-27130","date":"2026-09-10"}],"evidenceTotal":3,"provenance":"source"},"exploited":true,"otx":null,"cwes":[{"id":"CWE-120","name":"Buffer Copy without Checking Size of Input"},{"id":"CWE-121","name":"Stack-based Buffer Overflow"}],"references":[{"url":"https://www.qnap.com/en/security-advisory/qsa-24-23","tags":[]}],"techniques":[],"reports":[],"affected":[],"advisories":[],"euvd":{"id":"EUVD-2024-24380","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-24380","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[],"exploitSources":{"pocGithub":{"count":3,"skipped":0,"earliest":"2024-05-17","earliestUrl":"https://github.com/watchtowrlabs/CVE-2024-27130","repos":[{"name":"watchtowrlabs/CVE-2024-27130","url":"https://github.com/watchtowrlabs/CVE-2024-27130","stars":39,"created":"2024-05-17"},{"name":"d0rb/CVE-2024-27130","url":"https://github.com/d0rb/CVE-2024-27130","stars":2,"created":"2024-05-21"},{"name":"dkstar11q/cve-2024-27130-poc","url":"https://github.com/dkstar11q/cve-2024-27130-poc","stars":0,"created":"2024-12-24"}]},"first":{"date":"2024-05-17","source":"PoC-in-GitHub","url":"https://github.com/watchtowrlabs/CVE-2024-27130"},"provenance":"source"},"exploitRefs":[],"flow":[],"timeline":[{"date":"2024-05-17","kind":"exploit-public","label":"First public exploit: PoC-in-GitHub","url":"https://github.com/watchtowrlabs/CVE-2024-27130","provenance":"source"},{"date":"2024-05-21","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2024-27130","provenance":"source"},{"date":"2024-05-27","kind":"exploited-reported","label":"Exploitation first reported (VulnCheck KEV evidence)","url":"https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2024-05-27&host_type=src&vulnerability=cve-2024-27130","provenance":"source"}],"speed":{"daysToPublicExploit":null,"firstExploitFrom":"PoC-in-GitHub","daysToKev":null},"priority":{"score":64.7,"factors":[{"name":"In a KEV catalog","points":35.0,"detail":"listed in VulnCheck KEV"},{"name":"Recent KEV listing","points":0.0,"detail":"added 888 days ago"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":19.71,"detail":"percentile 0.9853"},{"name":"Named in threat reports","points":0.0,"detail":"0 reports"},{"name":"Public exploit code","points":5.0,"detail":"3 PoC-in-GitHub repos"},{"name":"Mentioned in OTX pulses","points":0.0,"detail":"0 pulses"},{"name":"CVSS severity","points":5.04,"detail":"base score 7.2"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]}}