CVE-2025-44013

qnap quts hero, qnap qts

TLP:CLEAR

csirt@kutim:~/threat-intel/cve/CVE-2025-44013

Katalog CVE

CVSS 6.5 · Medium EPSS 0,34%

Kerentanan NULL Pointer Dereference pada qnap quts hero, qnap qts. Skor CVSS 3.1 6.5 (Medium) menurut NVD.

Deskripsi (NVD)

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following versions: QTS 5.2.6.3195 build 20250715 and later QuTS hero h5.2.6.3195 build 20250715 and later

Rincian

Terbit di NVD
2 Januari 2026
Terakhir diubah
17 Juni 2026
Status NVD
Analyzed
CVSS 3.1
6.5 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-476: NULL Pointer Dereference
EPSS (30 hari)
0,34% peluang dieksploitasi; lebih tinggi dari 25,5% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
qnap quts hero Versi h5.2.0.2737 build_20240417
qnap quts hero Versi h5.2.0.2782 build_20240601
qnap quts hero Versi h5.2.0.2789 build_20240607
qnap quts hero Versi h5.2.0.2802 build_20240620
qnap quts hero Versi h5.2.0.2823 build_20240711
qnap quts hero Versi h5.2.0.2851 build_20240808
qnap quts hero Versi h5.2.0.2860 build_20240817
qnap quts hero Versi h5.2.1.2929 build_20241025
qnap quts hero Versi h5.2.1.2940 build_20241105
qnap quts hero Versi h5.2.2.2952 build_20241116
qnap quts hero Versi h5.2.3.3006 build_20250108
qnap quts hero Versi h5.2.4.3070 build_20250312
qnap quts hero Versi h5.2.4.3079 build_20250321
qnap quts hero Versi h5.2.5.3138 build_20250519
qnap quts hero Versi h5.2.6.3195 build_20250715
qnap quts hero Versi h5.3.0.3115 build_20250430
qnap quts hero Versi h5.3.0.3145 build_20250530
qnap quts hero Versi h5.3.0.3192 build_20250716
qnap qts Versi 5.2.0.2737 build_20240417
qnap qts Versi 5.2.0.2744 build_20240424
qnap qts Versi 5.2.0.2782 build_20240601
qnap qts Versi 5.2.0.2802 build_20240620
qnap qts Versi 5.2.0.2823 build_20240711
qnap qts Versi 5.2.0.2851 build_20240808
qnap qts Versi 5.2.0.2860 build_20240817
qnap qts Versi 5.2.1.2930 build_20241025
qnap qts Versi 5.2.2.2950 build_20241114
qnap qts Versi 5.2.3.3006 build_20250108
qnap qts Versi 5.2.4.3070 build_20250312
qnap qts Versi 5.2.4.3079 build_20250321
qnap qts Versi 5.2.4.3092 build_20250403
qnap qts Versi 5.2.5.3145 build_20250526
qnap qts Versi 5.2.6.3195 build_20250715
qnap qts Versi 5.2.6.3229 build_20250818

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:11 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.