VDB
CVE-2024-38643
CVE-2024-38643
PUBLISHED
CVSS 9.300000190734863 CRITICAL
A missing authentication for critical function vulnerability has been reported to affect Notes Station 3. If exploited, the vulnerability could allow remote attackers to gain access to and execute certain functions. We have already fixed the vulnerability in the following version: Notes Station 3 3.9.7 and later
EPSS 0.93% · 59.2th percentile
Risk Scores
CVSS 4.0
9.300000190734863
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
EPSS Score
0.93%
59.2th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| qnap | notes_station_3 | 3.9.0 |
| qnap | notes_station_3 | 3.9.0 |
| QNAP Systems Inc. | Notes Station 3 | 3.9.x |
Timeline
- Nov 22, 2024 CVE Published
- Nov 23, 2024 EPSS Score
- Nov 26, 2024 PoC Published
- Nov 26, 2024 PoC Published
- Dec 2, 2024 Coalition ESS Score
- Dec 7, 2024 Coalition ESS Score
- Dec 12, 2024 EPSS Score
- Dec 30, 2024 EPSS Score
- Jan 17, 2025 EPSS Score
- Feb 4, 2025 EPSS Score
- Feb 10, 2025 Coalition ESS Score
- Mar 11, 2025 EPSS Score
References
- https://www.qnap.com/go/security-advisory/qsa-24-47 advisory
- https://www.qnap.com/go/security-advisory/qsa-24-43 advisory
- https://www.qnap.com/en/security-advisory/qsa-24-36 url
- https://nvd.nist.gov/vuln/detail/CVE-2024-38643 advisory
- https://www.qnap.com/go/security-advisory/qsa-24-39 advisory
- https://www.qnap.com/go/security-advisory/qsa-24-44 advisory
- https://www.qnap.com/go/security-advisory/qsa-24-40 advisory
- https://www.qnap.com/go/security-advisory/qsa-24-46 advisory
- https://www.qnap.com/go/security-advisory/qsa-24-37 advisory
- https://www.qnap.com/go/security-advisory/qsa-24-36 advisory