PT-2025-10099 · Qnap · Qts+1

Christoph Kretz · Published 2025-03-07 · Updated 2026-01-30 · CVE-2024-13086

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions QTS versions prior to 5.2.0.2851 build 20240808 QuTS hero versions prior to h5.2.0.2851 build 20240808

Description A sensitive information exposure issue has been identified, which could allow remote attackers to compromise system security if exploited.

Recommendations For QTS versions prior to 5.2.0.2851 build 20240808, update to QTS 5.2.0.2851 build 20240808 or later. For QuTS hero versions prior to h5.2.0.2851 build 20240808, update to QuTS hero h5.2.0.2851 build 20240808 or later.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2024-13086

Affected Products

Qts

Quts Hero

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2024-13086 · Security Note
• https://qnap.com/en/security-advisory/qsa-25-03 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-13086 · Vendor Advisory
• https://t.me/cvetracker/18687 · Telegram Post
• https://t.me/cvedetector/19855 · Telegram Post
• https://twitter.com/CVEnew/status/1898246361696424115 · Twitter Post
• https://t.me/cveNotify/150435 · Telegram Post