CVE-2024-53695

Summary

A buffer overflow vulnerability has been reported to affect HBS 3 Hybrid Backup Sync. If exploited, the vulnerability could allow remote attackers to modify memory or crash processes.

We have already fixed the vulnerability in the following version: HBS 3 Hybrid Backup Sync 25.1.4.952 and later

Affected Software

VendorProductVersion RangeStatus
QNAP Systems Inc.HBS 3 Hybrid Backup Sync25.1.x < 25.1.4.952affected

Weaknesses

  • CWE-120: CWE-120
  • CWE-121: CWE-121

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References