CVE-2024-32764

Summary

A missing authentication for critical function vulnerability has been reported to affect myQNAPcloud Link. If exploited, the vulnerability could allow users with the privilege level of some functionality via a network.

We have already fixed the vulnerability in the following version: myQNAPcloud Link 2.4.51 and later

Affected Software

Weaknesses

• CWE-306: CWE-306
• CWE-346: CWE-346
• CWE-749: CWE-749

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: yes
  • Technical Impact: partial

CVE Program Container

Additional References

• https://www.qnap.com/en/security-advisory/qsa-24-09

References

• https://www.qnap.com/en/security-advisory/qsa-24-09

• ←Previous
• Next→