CVE-2024-50395

HIGH

QNAP Media Streaming add-on 500.1.1.0-500.1.1.5 - Authorization Bypass via User-Controlled Key

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2024-50395. PoCs published by neko-hat.

AI-analyzed exploit summary This PoC exploits an authorization bypass vulnerability in QNAP Media Streaming add-on by manipulating the User-Agent header to access restricted resources and download files without authentication.

Description

An authorization bypass through user-controlled key vulnerability has been reported to affect Media Streaming add-on. If exploited, the vulnerability could allow local network attackers to gain privilege. We have already fixed the vulnerability in the following version: Media Streaming add-on 500.1.1.6 ( 2024/08/02 ) and later

Exploits (1)

nomisec WORKING POC 2 stars

by neko-hat · poc

https://github.com/neko-hat/CVE-2024-50395

View Code ZIP pw:eip

This PoC exploits an authorization bypass vulnerability in QNAP Media Streaming add-on by manipulating the User-Agent header to access restricted resources and download files without authentication.

Classification

Working Poc 95%

Attack Type

Auth Bypass

Complexity

Moderate

Reliability

Reliable

Target: QNAP Media Streaming add-on versions before 500.1.1.6

No auth needed

Prerequisites: Network access to the target device · Media Streaming add-on running on the target

MITRE ATT&CK

T1189 - Drive-by Compromise T1078 - Valid Accounts

devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (1)

Core 1

Core References

Vendor Advisory

https://www.qnap.com/en/security-advisory/qsa-24-47

Scores

CVSS v3 8.8

EPSS 0.0132

EPSS Percentile 67.2%

Attack Vector ADJACENT_NETWORK

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact total

Details

CWE

CWE-639

Status published

Products (1)

qnap/media_streaming_add-on 500.1.1.0 - 500.1.1.6

Published Nov 22, 2024

Tracked Since Feb 18, 2026