What is the CVSS score of CVE-2024-56805?

CVE-2024-56805 has a CVSS 3.1 base score of 5.4 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L. EPSS exploitation probability: 0.1%.

Which versions of Qts are affected by CVE-2024-56805?

Organizations using A buffer overflow vulnerability should be aware of moderate risk from CVE-2024-56805, a buffer overflow vulnerability rated CVSS 5.4.. A patch is available.

How to fix or mitigate CVE-2024-56805?

Within 30 days: Identify affected systems and apply vendor patches as part of regular patch cycle. Monitor vendor channels for patch availability.

Qts CVE-2024-56805

EUVD-2024-54653 MEDIUM

Classic Buffer Overflow (CWE-120)

2025-06-06 security@qnapsecurity.com.tw

Buffer Overflow Qnap Qts Quts Hero

5.4

CVSS 3.1

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

Low

Availability

Low

Lifecycle Timeline

Patch available

Apr 16, 2026 - 05:29 EUVD

5.2.4.3079

EUVD ID Assigned

Mar 14, 2026 - 18:10 euvd

EUVD-2024-54653

Analysis Generated

Mar 14, 2026 - 18:10 vuln.today

CVE Published

Jun 06, 2025 - 16:15 nvd

MEDIUM 5.4

DescriptionNVD

A buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained user access to modify memory or crash processes.

We have already fixed the vulnerability in the following versions: QTS 5.2.4.3079 build 20250321 and later QuTS hero h5.2.4.3079 build 20250321 and later

Analysis

We have already fixed the vulnerability in the following versions: QTS 5.2.4.3079 build 20250321 and later QuTS hero h5.2.4.3079 build 20250321 and later

Technical ContextAI

A buffer overflow occurs when data written to a buffer exceeds its allocated size, potentially overwriting adjacent memory and corrupting program state. This vulnerability is classified as Classic Buffer Overflow (CWE-120).

RemediationAI

Use memory-safe languages or bounds-checked functions. Enable ASLR, DEP/NX, and stack canaries. Apply vendor patches promptly.

CVE-2024-56805 vulnerability details – vuln.today

Back