CVE-2024-53699
CVE-2024-53699
Título es
CVE-2024-53699
Vie, 07/03/2025 – 17:15
Tipo
CWE-787
Gravedad 2.0 Txt
Pendiente de análisis
Título en
CVE-2024-53699
Descripción en
An out-of-bounds write vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to modify or corrupt memory.
We have already fixed the vulnerability in the following versions:
QTS 5.2.3.3006 build 20250108 and later
QuTS hero h5.2.3.3006 build 20250108 and later
07/03/2025
07/03/2025
Vector CVSS:4.0
CVSS:4.0/AV:N/AC:H/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Gravedad 4.0
2.10
Gravedad 4.0 txt
LOW
Gravedad 3.1 Txt Gravedad 3.1 (CVSS 3.1 Base Score)
Pendiente de análisis
Referencias
https://www.qnap.com/en/security-advisory/qsa-24-54
Enviar en el boletín
Off
