1. Home
  2. CVE Database
  3. CVE-2024-32771
LOW · 2.6

CVE-2024-32771

An improper restriction of excessive authentication attempts vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow local network...

Vulnerability Description

An improper restriction of excessive authentication attempts vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow local network authenticated administrators to perform an arbitrary number of authentication attempts via unspecified vectors. QuTScloud is not affected. We have already fixed the vulnerability in the following versions: QTS 5.2.0.2782 build 20240601 and later QuTS hero h5.2.0.2782 build 20240601 and later

CVSS Score

2.6

LOW

CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:C/C:L/I:N/A:N
Attack Vector
ADJACENT_NETWORK
Attack Complexity
HIGH
Privileges Required
HIGH
User Interaction
NONE
Scope
CHANGED
Confidentiality
LOW
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
QnapQts5.1.0.2348
QnapQuts Heroh5.1.0.2409

Related Weaknesses (CWE)

CWE-307

References

FAQ

What is CVE-2024-32771?

CVE-2024-32771 is a vulnerability with a CVSS score of 2.6 (LOW). An improper restriction of excessive authentication attempts vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow local network...

How severe is CVE-2024-32771?

CVE-2024-32771 has been rated LOW with a CVSS base score of 2.6/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2024-32771?

Check the references section above for vendor advisories and patch information. Affected products include: Qnap Qts, Qnap Quts Hero.