An unchecked return value vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow local authenticated administrators to place the system in a state that could lead to a crash or other unintended behaviors via unspecified vectors. We have already fixed the vulnerability in the following versions: QTS 5.1.5.2645 build 20240116 and later QuTS hero h5.1.5.2647 build 20240118 and later
Solution:
The product does not check the return value from a method or function, which can prevent it from detecting unexpected states and conditions.
| Link | Tags |
|---|---|
| https://www.qnap.com/en/security-advisory/qsa-24-07 | vendor advisory |