CVEvulnerability

CVE-2024-13088

5.2 MEDIUM Published 2025-06-06 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2025-06-06
Last modified
2026-06-17
Assigner
[email protected]
CVSS 4.0 ([email protected])
5.2 MEDIUM — CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:P/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS 3.1 ([email protected])
7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-287

Description

An improper authentication vulnerability has been reported to affect QHora. If an attacker gains local network access, they can then exploit the vulnerability to compromise the security of the system. We have already fixed the vulnerability in the following version: QuRouter 2.5.0.140 and later

Affected configurations

• qnap qurouter 2.4.0.190 • qnap qurouter 2.4.1.172 • qnap qurouter 2.4.1.634 • qnap qurouter 2.4.2.317 • qnap qurouter 2.4.2.538 • qnap qurouter 2.4.3.103 • qnap qurouter 2.4.4.106 • qnap qurouter 2.4.5.032 • qnap qurouter 2.4.6.028

Related

Weakness · CWE (1)

  • CWE-287 Improper Authentication weakness

References