Skip to main content

Mondoo Vulnerability Intelligence

Curated by Mondoo Research, enhanced with AI

Resources

Search Vulnerabilities
Trending CVEs
Browse Ecosystems
Terminology
Blog

Open Source

cnquery
cnspec

Star us on GitHub!

Company

Mondoo Platform
About
Contact

© 2026 Mondoo, Inc.

Privacy Policy Terms of Service Imprint

Vulnerability Intelligence

Vulnerability IntelligenceCVE-2022-27597

CVE-2022-27597

LOW2.7

QTS, QuTS hero, QuTScloud, QVP (QVR Pro appliances)

Published Mar 29, 2023

Modified 1 years ago

Details

A vulnerability has been reported to affect QNAP operating systems. If exploited, the out-of-bounds read vulnerability allows remote authenticated administrators to get secret values. The vulnerability affects the following QNAP operating systems: QTS, QuTS hero, QuTScloud, QVP (QVR Pro appliances) We have already fixed the vulnerability in the following versions: QTS 5.0.1.2346 build 20230322 and later QuTS hero h5.0.1.2348 build 20230324 and later

References

https://www.cve.org/CVERecord?id=CVE-2022-27597

https://www.qnap.com/en/security-advisory/qsa-23-06

CVSS Analysis

CVSS v3.1

2.7

Exploitability

Attack Vector

NetworkAV:N

Attack Complexity

LowAC:L

Privileges Required

HighPR:H

User Interaction

NoneUI:N

Scope

Scope

UnchangedS:U

Impact

Confidentiality

LowC:L

Integrity

NoneI:N

Availability

NoneA:N

2.7/CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

Weakness Type (CWE)

Memory Safety

Out-of-bounds Read

Other

Ecosystems

Timeline

PublishedMar 29, 2023

ModifiedFeb 12, 2025

CVE-2022-27597 | Mondoo Vulnerability Intelligence