CVE-2024-27130

This PoC exploits a stack overflow vulnerability (CVE-2024-27130) in QNAP devices to achieve remote code execution (RCE) by creating a new user with sudo privileges and enabling SSH access. The exploit leverages a buffer overflow in the filemanager/share.cgi endpoint to execute arbitrary commands.

This repository contains a functional PoC for CVE-2024-27130, a buffer overflow vulnerability in QNAP QTS that allows remote command execution with root privileges. The exploit crafts a malicious payload to trigger a SIGSEGV and execute arbitrary commands, including creating a new user with sudo privileges.

This PoC exploits a stack-based buffer overflow in QNAP NAS devices via the `share.cgi` script's `No_Support_ACL` function, allowing unauthenticated remote code execution. It creates a backdoor user with sudo privileges and initiates an SSH session.