CVE-2024-53695

published 2025-03-07

CVE-2024-53695: A buffer overflow vulnerability has been reported to affect HBS 3 Hybrid Backup Sync. If exploited, the vulnerability could allow remote attackers to modify…

medium 6.3 CVSS 4.0

AV N AC L AT P PR N UI N VC N VI L VA N SC N SI N SA N E X CR X IR X AR X MAV X MAC X MAT X MPR X MUI X MVC X MVI X MVA X MSC X MSI X MSA X S X AU X R X V X RE X U X

A buffer overflow vulnerability has been reported to affect HBS 3 Hybrid Backup Sync. If exploited, the vulnerability could allow remote attackers to modify memory or crash processes.

We have already fixed the vulnerability in the following version:
HBS 3 Hybrid Backup Sync 25.1.4.952 and later

Affected

2 ranges

Vendor	Product	Version range	Fixed in
qnap	hybrid_backup_sync	>= 25.1.0.627 < 25.1.4.952	25.1.4.952
qnap_systems_inc	hbs_3_hybrid_backup_sync	>= 25.1.x < 25.1.4.952	25.1.4.952

CWE-120 CWE-121