CVE-2025-48721

qnap qts, qnap quts hero

TLP:CLEAR

csirt@kutim:~/threat-intel/cve/CVE-2025-48721

Katalog CVE

CVSS 6.5 · Medium EPSS 0,43%

Kerentanan Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') pada qnap qts, qnap quts hero. Skor CVSS 3.1 6.5 (Medium) menurut NVD.

Deskripsi (NVD)

A buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to modify memory or crash processes. We have already fixed the vulnerability in the following version: QTS 5.2.8.3332 build 20251128 and later

Rincian

Terbit di NVD
2 Januari 2026
Terakhir diubah
7 Oktober 2026
Status NVD
Analyzed
CVSS 3.1
6.5 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
CWE-121: Stack-based Buffer Overflow
EPSS (30 hari)
0,43% peluang dieksploitasi; lebih tinggi dari 35,2% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
qnap qts Versi 5.2.0.2737 build_20240417
qnap qts Versi 5.2.0.2744 build_20240424
qnap qts Versi 5.2.0.2782 build_20240601
qnap qts Versi 5.2.0.2802 build_20240620
qnap qts Versi 5.2.0.2823 build_20240711
qnap qts Versi 5.2.0.2851 build_20240808
qnap qts Versi 5.2.0.2860 build_20240817
qnap qts Versi 5.2.1.2930 build_20241025
qnap qts Versi 5.2.2.2950 build_20241114
qnap qts Versi 5.2.3.3006 build_20250108
qnap qts Versi 5.2.4.3070 build_20250312
qnap qts Versi 5.2.4.3079 build_20250321
qnap qts Versi 5.2.4.3092 build_20250403
qnap qts Versi 5.2.5.3145 build_20250526
qnap qts Versi 5.2.6.3195 build_20250715
qnap qts Versi 5.2.6.3229 build_20250818
qnap qts Versi 5.2.7.3256 build_20250913
qnap qts Versi 5.2.7.3297 build_20251024
qnap quts hero Versi h5.2.0.2737 build_20240417
qnap quts hero Versi h5.2.0.2782 build_20240601
qnap quts hero Versi h5.2.0.2789 build_20240607
qnap quts hero Versi h5.2.0.2802 build_20240620
qnap quts hero Versi h5.2.0.2823 build_20240711
qnap quts hero Versi h5.2.0.2851 build_20240808
qnap quts hero Versi h5.2.0.2860 build_20240817
qnap quts hero Versi h5.2.1.2929 build_20241025
qnap quts hero Versi h5.2.1.2940 build_20241105
qnap quts hero Versi h5.2.2.2952 build_20241116
qnap quts hero Versi h5.2.3.3006 build_20250108
qnap quts hero Versi h5.2.4.3070 build_20250312
qnap quts hero Versi h5.2.4.3079 build_20250321
qnap quts hero Versi h5.2.5.3138 build_20250519
qnap quts hero Versi h5.2.6.3195 build_20250715
qnap quts hero Versi h5.2.7.3256 build_20250913
qnap quts hero Versi h5.2.7.3297 build_20251024
qnap quts hero Versi h5.3.0.3115 build_20250430
qnap quts hero Versi h5.3.0.3145 build_20250530
qnap quts hero Versi h5.3.0.3192 build_20250716

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 8 Okt 2026, 00:25 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.