by Kastro
Paper/Archive/CVE-2024-48862

CVE-2024-48862

QNAP Systems Inc. QuLog Center — QuLog Center

EPSS 0.9%CVSS 9.8
critical.is priorityof 100
42
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 60.3.603 × 2012.1No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

A link following vulnerability has been reported to affect QuLog Center. If exploited, the vulnerability could allow remote attackers to traverse the file system to unintended locations and read or overwrite the contents of unexpected files. We have already fixed the vulnerability in the following versions: QuLog Center 1.7.0.831 ( 2024/10/15 ) and later QuLog Center 1.8.0.888 ( 2024/10/15 ) and later

Affected

ProductAffectedFixed inSource
QuLog Center1.7.x.x – < 1.7.0.831 ( 2024/10/15 )1.7.0.831 ( 2024/10/15 )CNA
QuLog Center1.8.x.x – < 1.8.0.888 ( 2024/10/15 )1.8.0.888 ( 2024/10/15 )CNA
qulog_center1.7.0.0 – < 1.7.0.8311.7.0.831CISA-ADP
qulog_center1.8.0.0 – < 1.8.0.8881.8.0.888CISA-ADP

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
qnap (CNA)8.7CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refqnap.com/en/security-advisory/qsa-24-46