CVE-2024-48861

published 2024-11-22

CVE-2024-48861: An OS command injection vulnerability has been reported to affect several product versions. If exploited, the vulnerability could allow local network attackers…

high 7.3 CVSS 4.0

AV P AC L AT P PR N UI N VC H VI H VA H SC H SI H SA H E X CR X IR X AR X MAV X MAC X MAT X MPR X MUI X MVC X MVI X MVA X MSC X MSI X MSA X S X AU X R X V X RE X U X

An OS command injection vulnerability has been reported to affect several product versions. If exploited, the vulnerability could allow local network attackers to execute commands.

We have already fixed the vulnerability in the following versions:
QuRouter 2.4.4.106 and later

Affected

7 ranges

Vendor	Product	Version range	Fixed in
qnap	qurouter	—	—
qnap	qurouter	—	—
qnap	qurouter	—	—
qnap	qurouter	—	—
qnap	qurouter	—	—
qnap	qurouter	—	—
qnap_systems_inc	qurouter	>= 2.4.x < 2.4.4.106	2.4.4.106

CWE-77 CWE-78