CVE-2022-27596 - CVE House
Back to Database
Status published Critical CVE-2022-27596

Vulnerability in QTS

Vulnerability Description

A vulnerability has been reported to affect QNAP device running QuTS hero, QTS. If exploited, this vulnerability allows remote attackers to inject malicious code. We have already fixed this vulnerability in the following versions of QuTS hero, QTS: QuTS hero h5.0.1.2248 build 20221215 and later QTS 5.0.1.2234 build 20221201 and later

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-27596

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • huasheng_mangguo

Affected Vendor

QNAP Systems Inc.

View all reports →

Affected Software

QuTS hero, QTS
Vulnerable Versions:
h5.0.1, 5.0.1

Timeline

Official Publish: January 30th, 2023
Last Modified: March 27th, 2025
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)