PT-2025-40547 · Qnap · Qsync Central

Coral · Published 2025-10-03 · Updated 2025-10-03 · CVE-2025-44006

Positive Technologies (AI Summary)

CVSS v4.0

7.1

High

Base vector

AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Qsync Central versions prior to 5.0.0.1

Description A flaw exists in Qsync Central that allows a remote attacker, having gained a user account, to exhaust resources and potentially prevent other systems, applications, or processes from accessing those resources. The issue involves an allocation of resources without limits or throttling.

Recommendations Update to Qsync Central version 5.0.0.1 or later.

Fix

Allocation of Resources Without Limits

Weakness Enumeration

CWE-770

Related Identifiers

CVE-2025-44006

Affected Products

Qsync Central

References · 5

• https://osv.dev/vulnerability/CVE-2025-44006 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-44006 · Security Note
• https://qnap.com/en/security-advisory/qsa-25-34 · Vendor Advisory
• https://twitter.com/CVEnew/status/1974177854578426339 · Twitter Post
• https://t.me/CVEtracker/34043 · Telegram Post