← Back

CVE-2024-32765

nvd nist
Published: Aug 12, 2024Modified: Jun 17, 2026

JSON object

Loading...
4.2
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
Exploitability: 0.8 / Impact: 3.4
Source: security@qnapsecurity.com.tw (Secondary)

Description

A vulnerability has been reported to affect Network & Virtual Switch. If exploited, the vulnerability could allow local authenticated administrators to gain access to and execute certain functions via unspecified vectors. We have already fixed the vulnerability in the following versions: QTS 5.1.8.2823 build 20240712 and later QuTS hero h5.1.8.2823 build 20240712 and later

Affected (2)

Products: Qnap: Qts, Quts Hero
Qnap
2 products
Qts
Quts Hero
Configuration A
2 vulnerable
Vulnerable SoftwareAffected Versions
Qts
From 5.1.0 to 5.1.8.2823
Quts Hero
From h5.1.0 to h5.1.8.2823

Related CWEs

CWE-291
Reliance on IP Address for Authentication
The product uses an IP address for authentication.
CWE-306
Missing Authentication for Critical Function
The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

References (1)

Source: security@qnapsecurity.com.tw
Vendor Advisory

Timeline

No history available yet.