Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-mqhq-rj42-jpjp

Опубликовано: 06 дек. 2024
Источник: github
Github: Не прошло ревью
CVSS4: 5.3
CVSS3: 9.1

Описание

An improper authentication vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers to compromise the security of the system.

We have already fixed the vulnerability in the following versions: QTS 5.1.9.2954 build 20241120 and later QTS 5.2.2.2950 build 20241114 and later QuTS hero h5.1.9.2954 build 20241120 and later QuTS hero h5.2.2.2952 build 20241116 and later

An improper authentication vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers to compromise the security of the system.

We have already fixed the vulnerability in the following versions: QTS 5.1.9.2954 build 20241120 and later QTS 5.2.2.2950 build 20241114 and later QuTS hero h5.1.9.2954 build 20241120 and later QuTS hero h5.2.2.2952 build 20241116 and later

EPSS

Процентиль: 57%
0.00353
Низкий

5.3 Medium

CVSS4

9.1 Critical

CVSS3

Дефекты

CWE-287

Связанные уязвимости

CVSS3: 9.1
nvd
около 1 года назад

An improper authentication vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers to compromise the security of the system. We have already fixed the vulnerability in the following versions: QTS 5.1.9.2954 build 20241120 and later QTS 5.2.2.2950 build 20241114 and later QuTS hero h5.1.9.2954 build 20241120 and later QuTS hero h5.2.2.2952 build 20241116 and later

CVSS3: 7.3
fstec
больше 1 года назад

Уязвимость операционных систем QuTS hero и QTS сетевых устройств Qnap, связанная с недостатками процедуры аутентификации, позволяющая нарушителю скомпрометировать целевую систему

EPSS

Процентиль: 57%
0.00353
Низкий

5.3 Medium

CVSS4

9.1 Critical

CVSS3

Дефекты

CWE-287