QNAP Vulnerabilities and Affected Products - Exploit Intel

Skip to content

Products

qts38 vulnerabilities
quts_hero27 vulnerabilities
Photo Station8 vulnerabilities
qutscloud8 vulnerabilities
Q'center Virtual Appliance7 vulnerabilities
QNAP Network-Attached Storage (NAS)5 vulnerabilities
Network Attached Storage (NAS)4 vulnerabilities
notes_station_34 vulnerabilities
QNAP Media Streaming Add-On4 vulnerabilities
QNAP QTS4 vulnerabilities
media_streaming_add-on3 vulnerabilities
qurouter3 vulnerabilities
Helpdesk2 vulnerabilities
malware_remover2 vulnerabilities
music_station2 vulnerabilities
QTS Login function2 vulnerabilities
QTS Password function2 vulnerabilities
qufirewall2 vulnerabilities
ai_core1 vulnerability
App Center in QTS1 vulnerability
container_station1 vulnerability
hbs_31 vulnerability
Helpdesk in QTS1 vulnerability
iartist_lite1 vulnerability
LDAP Server in QTS1 vulnerability

QNAP vulnerability results
Vulnerability	Title and context	CVSS	EPSS	PoCs	Signals	STIX action
CVE-2024-50388CRITICAL	HBS 3 Hybrid Backup Sync An OS command injection vulnerability has been reported to affect HBS 3 Hybrid Backup Sync. If exploited, the vulnerability could allow remote attackers to execute commands. We have already fixed the vulnerability in the following version: HBS 3 Hybrid Backup Sync 25.1.1.673 and later CWE-77 CWE-78Dec 6, 2024	CVSS9.5v4.0	EPSS2.31%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX