PT-2025-51363 · Qnap · Quts Hero+1

Le Mau Anh Phong · Publicado 2025-12-16 · Atualizado 2025-12-17 · CVE-2025-59385

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions QNAP versions prior to QTS 5.2.7.3297 build 20251024 QNAP versions prior to QuTS hero h5.2.7.3297 build 20251024 QNAP versions prior to QuTS hero h5.3.1.3292 build 20251024

Description An authentication bypass allows unauthorized access to resources. Attackers can exploit this issue to gain access to resources without proper authentication.

Recommendations Update QTS to version 5.2.7.3297 build 20251024 or later. Update QuTS hero to version h5.2.7.3297 build 20251024 or later. Update QuTS hero to version h5.3.1.3292 build 20251024 or later.

Correção

Authentication Bypass by Spoofing

Enumeração de Fraquezas

CWE-290

Identificadores relacionados

CVE-2025-59385

Produtos afetados

Qts

Quts Hero

Referências · 8

• https://t.me/cveNotify/145895 · Publicação no Telegram
• https://twitter.com/CVEnew/status/2001365833973452841 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2025-59385 · Nota de Segurança
• https://t.me/cveNotify/146083 · Publicação no Telegram
• https://qnap.com/en/security-advisory/qsa-25-45 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2025-59385 · Aviso do Fabricante
• https://twitter.com/VulmonFeeds/status/2000809780311445687 · Publicação no Twitter
• https://t.me/CVEtracker/39913 · Publicação no Telegram