Description
An improper restriction of excessive authentication attempts vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow local network authenticated administrators to perform an arbitrary number of authentication attempts via unspecified vectors. QuTScloud is not affected. We have already fixed the vulnerability in the following versions: QTS 5.2.0.2782 build 20240601 and later QuTS hero h5.2.0.2782 build 20240601 and later
Scores
CVSS v3
2.6
EPSS
0.0012
EPSS Percentile
30.2%
Attack Vector
ADJACENT_NETWORK
CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:C/C:L/I:N/A:N
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
partial
Details
CWE
CWE-307
Status
published
Products (32)
qnap/qts
5.1.0.2348 build_20230325
qnap/qts
5.1.0.2399 build_20230515
qnap/qts
5.1.0.2418 build_20230603
qnap/qts
5.1.0.2444 build_20230629
qnap/qts
5.1.0.2466 build_20230721
qnap/qts
5.1.1.2491 build_20230815
qnap/qts
5.1.2.2533 build_20230926
qnap/qts
5.1.3.2578 build_20231110
qnap/qts
5.1.4.2596 build_20231128
qnap/qts
5.1.5.2645 build_20240116
... and 22 more
Published
Sep 06, 2024
Tracked Since
Feb 18, 2026