PT-2025-24289 · Qurouter · Qurouter

Published 2025-06-06 · Updated 2026-03-30 · CVE-2024-13088

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions QuRouter versions prior to 2.5.0.140

Description An improper authentication issue has been reported, affecting the security of the system if an attacker gains local network access.

Recommendations For versions prior to 2.5.0.140, update to QuRouter version 2.5.0.140 or later to resolve the issue.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2024-13088

ZDI-26-244

Affected Products

Qurouter

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2024-13088 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-26-244 · Security Note
• https://osv.dev/vulnerability/CVE-2024-13088 · Vendor Advisory
• https://qnap.com/en/security-advisory/qsa-25-15 · Vendor Advisory
• https://t.me/cvenotify/125076 · Telegram Post
• https://twitter.com/CVEnew/status/1931037251267416151 · Twitter Post