by Kastro
Paper/Archive/CVE-2024-48864

CVE-2024-48864

QNAP Systems Inc. File Station 5 — File Station 5

EPSS 0.5%CVSS 9.1
critical.is priorityof 100
36
CVSS 9.1 (NVD)9.1 / 10 × 3027.3Not in CISA KEV+300.0EPSS percentile 42.2.422 × 208.4No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

A files or directories accessible to external parties vulnerability has been reported to affect File Station 5. If exploited, the vulnerability could allow remote attackers to read/write files or directories. We have already fixed the vulnerability in the following versions: File Station 5 5.5.6.4741 and later

Affected

ProductAffectedFixed inSource
File Station 55.5.x – < 5.5.6.47415.5.6.4741CNA

Scores by source

NVD9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
qnap (CNA)5.3CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: partial

References

refqnap.com/en/security-advisory/qsa-24-55