CVE-2024-50387

CRITICAL

9.8

Description

A SQL injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers to inject malicious code. We have already fixed the vulnerability in the following version: SMB Service 4.15.002 and later SMB Service h4.15.002 and later

Details CVE

Score CVSS v3.19.8

SeveriteCRITICAL

Vecteur CVSSCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Vecteur d'attaqueNETWORK

ComplexiteLOW

Privileges requisNONE

Interaction utilisateurNONE

Publie12/6/2024

Derniere modification12/8/2025

Sourcenvd

Observations honeypot0

Produits affectes

qnap:smb_service

Faiblesses (CWE)

CWE-89

References

https://www.qnap.com/en/security-advisory/qsa-24-42(security@qnapsecurity.com.tw)

Correlations IOC

Aucune correlation enregistree

This product uses data from the NVD API but is not endorsed or certified by the NVD.