CVEvulnerability

CVE-2024-32765

4.2 MEDIUM Published 2024-08-12 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2024-08-12
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
4.2 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
Weaknesses
CWE-291, CWE-306

Description

A vulnerability has been reported to affect Network & Virtual Switch. If exploited, the vulnerability could allow local authenticated administrators to gain access to and execute certain functions via unspecified vectors. We have already fixed the vulnerability in the following versions: QTS 5.1.8.2823 build 20240712 and later QuTS hero h5.1.8.2823 build 20240712 and later

Affected configurations

• qnap qts (>= 5.1.0 < 5.1.8.2823) • qnap quts hero (>= h5.1.0 < h5.1.8.2823)

Related

Weakness · CWE (2)

  • CWE-291 Reliance on IP Address for Authentication weakness
  • CWE-306 Missing Authentication for Critical Functionality weakness

References