PT-2024-10313 · Qnap · Qts+1
Published
2024-12-06
·
Updated
2025-09-23
·
CVE-2024-48865
CVSS v4.0
8.9
High
| Vector | AV:A/AC:H/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H |
Name of the Vulnerable Software and Affected Versions
QuTS hero versions prior to h5.1.9.2954 build 20241120
QuTS hero versions prior to h5.2.2.2952 build 20241116
QTS versions prior to 5.1.9.2954 build 20241120
QTS versions prior to 5.2.2.2950 build 20241114
Description
The issue is related to improper certificate validation in QNAP operating systems, which could allow an attacker to compromise the security of the system. Exploitation of this issue may lead to a denial of service. The vulnerability can be exploited by an attacker with local network access.
Recommendations
For QuTS hero versions prior to h5.1.9.2954 build 20241120, update to version h5.1.9.2954 build 20241120 or later.
For QuTS hero versions prior to h5.2.2.2952 build 20241116, update to version h5.2.2.2952 build 20241116 or later.
For QTS versions prior to 5.1.9.2954 build 20241120, update to version 5.1.9.2954 build 20241120 or later.
For QTS versions prior to 5.2.2.2950 build 20241114, update to version 5.2.2.2950 build 20241114 or later.
Fix
Improper Certificate Validation
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Qts
Quts Hero