PT-2025-10108 · Qnap · Hbs 3 Hybrid Backup Sync

Catalpa · Published 2025-03-07 · Updated 2025-03-08 · CVE-2024-53695

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions HBS 3 Hybrid Backup Sync versions prior to 25.1.4.952

Description A buffer overflow issue has been reported, which could allow remote attackers to modify memory or crash processes.

Recommendations For versions prior to 25.1.4.952, update to version 25.1.4.952 or later to resolve the issue.

Fix

Stack Overflow

Buffer Overflow

Weakness Enumeration

CWE-121

CWE-120

Related Identifiers

CVE-2024-53695

Affected Products

Hbs 3 Hybrid Backup Sync

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2024-53695 · Security Note
• https://qnap.com/en/security-advisory/qsa-25-06 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-53695 · Vendor Advisory
• https://t.me/cvetracker/18696 · Telegram Post
• https://t.me/cvedetector/19842 · Telegram Post
• https://twitter.com/CVEnew/status/1898246353681072568 · Twitter Post