Qnap Systems Inc Qsync Central vulnerabilities

62 known vulnerabilities affecting qnap_systems_inc/qsync_central.

Total CVEs

62

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH20MEDIUM18LOW24

Vulnerabilities

Page 4 of 4

CVE-2024-50404MEDIUMCVSS 6.8≥ 4.4.x.x, < 4.4.0.16_20240819 ( 2024/08/19 )2024-12-06

CVE-2024-50404 [MEDIUM] CWE-59 CVE-2024-50404: A link following vulnerability has been reported to affect Qsync Central. If exploited, the vulnerab A link following vulnerability has been reported to affect Qsync Central. If exploited, the vulnerability could allow remote attackers who have gained user access to traverse the file system to unintended locations. We have already fixed the vulnerability in the following versions: Qsync Central 4.4.0.16_20240819 ( 2024/08/19 ) and later

CVE-2023-47564HIGHCVSS 8.1≥ 4.4.x.x, < 4.4.0.15 ( 2024/01/04 )≥ 4.3.x.x, < 4.3.0.11 ( 2024/01/11 )2024-02-02

CVE-2023-47564 [HIGH] CWE-732 CVE-2023-47564: An incorrect permission assignment for critical resource vulnerability has been reported to affect Q An incorrect permission assignment for critical resource vulnerability has been reported to affect Qsync Central. If exploited, the vulnerability could allow authenticated users to read or modify the resource via a network. We have already fixed the vulnerability in the following versions: Qsync Central 4.4.0.15 ( 2024/01/04 ) and later Qsync Central

← Previous4 / 4