CVE-2024-50388

CRITICAL IN THE WILD

HBS 3 Hybrid Backup Sync < 25.1.1.673 - OS Command Injection

Title source: llm
STIX 2.1

Exploitation Summary

CVE-2024-50388 has been observed exploited in the wild (reported by InTheWild.io).

Description

An OS command injection vulnerability has been reported to affect HBS 3 Hybrid Backup Sync. If exploited, the vulnerability could allow remote attackers to execute commands. We have already fixed the vulnerability in the following version: HBS 3 Hybrid Backup Sync 25.1.1.673 and later

References (1)

Core 1
Core References

Scores

CVSS v3 9.8
EPSS 0.0793
EPSS Percentile 92.1%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

InTheWild.io 2024-10-29
CWE
CWE-78 CWE-77
Status published
Products (1)
qnap/hybrid_backup_sync 25.1.0.627
Published Dec 06, 2024
Tracked Since Feb 18, 2026