by Kastro
Paper/Archive/CVE-2025-59388

CVE-2025-59388

QNAP Systems Inc. Hyper Data Protector — Hyper Data Protector

EPSS 0.5%CVSS 9.8
critical.is priorityof 100
38
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 43.1.431 × 208.6No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

A use of hard-coded password vulnerability has been reported to affect Hyper Data Protector. The remote attackers can then exploit the vulnerability to gain unauthorized access. We have already fixed the vulnerability in the following version: Hyper Data Protector 2.3.1.455 and later

Affected

ProductAffectedFixed inSource
Hyper Data Protector2.3.x – < 2.3.1.4552.3.1.455CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
qnap (CNA)6.6CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:U
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: partial

References

refqnap.com/en/security-advisory/qsa-25-48