CVE-2024-13086

published 2025-03-07

CVE-2024-13086: An exposure of sensitive information vulnerability has been reported to affect product. If exploited, the vulnerability could allow remote attackers to…

Priority P3 43 high 7.5 CVSS 3.1

AV N AC L PR N UI N S U C H I N A N

An exposure of sensitive information vulnerability has been reported to affect product. If exploited, the vulnerability could allow remote attackers to compromise the security of the system.

We have already fixed the vulnerability in the following version:
QTS 5.2.0.2851 build 20240808 and later
QuTS hero h5.2.0.2851 build 20240808 and later

Affected

4 ranges

Vendor	Product	Version range	Fixed in
qnap	qts	>= 5.0.0 < 5.2.0.2851	5.2.0.2851
qnap	quts_hero	>= h5.0.0 < h5.2.0.2851	h5.2.0.2851
qnap_systems_inc	qts	>= 5.x < QTS 5.2.0.2851 build 20240808	QTS 5.2.0.2851 build 20240808
qnap_systems_inc	quts_hero	>= h5.x < QuTS hero h5.2.0.2851 build 20240808	QuTS hero h5.2.0.2851 build 20240808

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-200