Skip to content
OpenAdvisories
High · 7.3 CVE-2024-48861 EUVD-2024-43182GHSA-m5jm-j4cj-7522

QHora

Published Nov 22, 2024 · Updated Nov 26, 2024 · Assigned by qnap

Description

An OS command injection vulnerability has been reported to affect several product versions. If exploited, the vulnerability could allow local network attackers to execute commands.

We have already fixed the vulnerability in the following versions:
QuRouter 2.4.4.106 and later

Affected products

VendorProductAffectedFixed
QNAP Systems QuRouter 2.4.x – < 2.4.4.106 2.4.4.106

References