CVE-2024-32765

Katalog CVE

CVSS 4.2 · Medium EPSS 0,21%

Kerentanan Reliance on IP Address for Authentication pada qnap qts, qnap quts hero. Skor CVSS 3.1 4.2 (Medium) menurut qnapsecurity.com.tw.

Deskripsi (NVD)

A vulnerability has been reported to affect Network & Virtual Switch. If exploited, the vulnerability could allow local authenticated administrators to gain access to and execute certain functions via unspecified vectors. We have already fixed the vulnerability in the following versions: QTS 5.1.8.2823 build 20240712 and later QuTS hero h5.1.8.2823 build 20240712 and later

Rincian

Terbit di NVD

12 Agustus 2024

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

4.2 (Medium), sumber qnapsecurity.com.tw
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-291: Reliance on IP Address for Authentication
CWE-306: Missing Authentication for Critical Function

EPSS (30 hari)

0,21% peluang dieksploitasi; lebih tinggi dari 10,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.qnap.com/en/security-advisory/qsa-24-14 advisory vendor