PT-2024-13211 · Unknown · Music Station

Thomas Fady · Published 2024-09-06 · Updated 2025-12-08 · CVE-2023-45038

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Music Station versions prior to 5.4.0

Description An improper authentication vulnerability has been reported to affect Music Station. If exploited, the vulnerability could allow users to compromise the security of the system via a network.

Recommendations For Music Station versions prior to 5.4.0, update to version 5.4.0 or later to resolve the issue.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2023-45038

Affected Products

Music Station

References · 8

• https://qnap.com/en/security-advisory/qsa-24-25 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-45038 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-45038 · Security Note
• https://t.me/cvenotify/96492 · Telegram Post
• https://twitter.com/pdnuclei_bot/status/1998120431824560293 · Twitter Post
• https://twitter.com/CVEnew/status/1832097910634504449 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1832130317768888667 · Twitter Post
• https://t.me/cvenotify/93772 · Telegram Post