CVE-2022-27600

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-27600
An uncontrolled resource consumption vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following versions: QTS 5.0.1.2277 and later QTS 4.5.4.2280 build 20230112 and later QuTS hero h5.0.1.2277 build 20230112 and later QuTS hero h4.5.4.2374 build 20230417 and later QuTScloud c5.0.1.2374 and later

6.8 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.2 / Impact : 4.0

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope CHANGED

References
Link Resource
https://www.qnap.com/en/security-advisory/qsa-23-09 Vendor Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:qnap:qts:*:*:*:*:*:*:*:*
cpe:2.3:o:qnap:qts:*:*:*:*:*:*:*:*
cpe:2.3:o:qnap:qts:4.5.4.2280:-:*:*:*:*:*:*
cpe:2.3:o:qnap:qts:5.0.1.2277:-:*:*:*:*:*:*
cpe:2.3:o:qnap:quts_hero:*:*:*:*:*:*:*:*
cpe:2.3:o:qnap:quts_hero:*:*:*:*:*:*:*:*
cpe:2.3:o:qnap:quts_hero:h4.5.4.2374:-:*:*:*:*:*:*
cpe:2.3:o:qnap:quts_hero:h5.0.1.2277:-:*:*:*:*:*:*
cpe:2.3:o:qnap:qutscloud:*:*:*:*:*:*:*:*
History

08 Dec 2025, 18:46

Type Values Removed Values Added
Summary
  • (es) Se ha informado de una vulnerabilidad de consumo de recursos no controlado que afecta a varias versiones del sistema operativo QNAP. Si se explota, la vulnerabilidad podría permitir a atacantes remotos lanzar un ataque de denegación de servicio (DoS). Ya hemos corregido la vulnerabilidad en las siguientes versiones: QTS 5.0.1.2277 y posteriores QTS 4.5.4.2280 compilación 20230112 y posteriores QuTS hero h5.0.1.2277 compilación 20230112 y posteriores QuTS hero h4.5.4.2374 compilación 20230417 y posteriores QuTScloud c5.0.1.2374 y posteriores
References () https://www.qnap.com/en/security-advisory/qsa-23-09 - () https://www.qnap.com/en/security-advisory/qsa-23-09 - Vendor Advisory
First Time Qnap qts
Qnap qutscloud
Qnap quts Hero
Qnap
CPE cpe:2.3:o:qnap:qutscloud:*:*:*:*:*:*:*:*
cpe:2.3:o:qnap:quts_hero:h5.0.1.2277:-:*:*:*:*:*:*
cpe:2.3:o:qnap:qts:4.5.4.2280:-:*:*:*:*:*:*
cpe:2.3:o:qnap:quts_hero:h4.5.4.2374:-:*:*:*:*:*:*
cpe:2.3:o:qnap:qts:*:*:*:*:*:*:*:*
cpe:2.3:o:qnap:qts:5.0.1.2277:-:*:*:*:*:*:*
cpe:2.3:o:qnap:quts_hero:*:*:*:*:*:*:*:*

19 Dec 2024, 02:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-12-19 02:15

Updated : 2025-12-08 18:46

NVD link : CVE-2022-27600

Mitre link : CVE-2022-27600

CVE.ORG link : CVE-2022-27600

JSON object : View

Products Affected

qnap

  • qutscloud
  • qts
  • quts_hero
CWE
CWE-400

Uncontrolled Resource Consumption

CWE-798

Use of Hard-coded Credentials