Sensitive Information Exposure in QNAP QTS and QuTS Hero

CVE-2024-13086

Summary

A vulnerability has been identified in QNAP's QTS and QuTS Hero products, where sensitive information may be exposed to potential remote attackers. If successfully exploited, this vulnerability could result in unauthorized access to sensitive data, compromising system integrity. Users are strongly advised to upgrade to QTS 5.2.0.2851 build 20240808 or later and QuTS Hero h5.2.0.2851 build 20240808 or later to mitigate this risk. Further details can be found in the official security advisory provided by QNAP.

References