VDB
CVE-2024-38647
CVE-2024-38647
PUBLISHED
CVSS 7.900000095367432 HIGH
An exposure of sensitive information vulnerability has been reported to affect QNAP AI Core. If exploited, the vulnerability could allow remote attackers to compromise the security of the system. We have already fixed the vulnerability in the following version: QNAP AI Core 3.4.1 and later
EPSS 0.65% · 49.4th percentile
Risk Scores
CVSS 4.0
7.900000095367432
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:H/SI:H/SA:H
EPSS Score
0.65%
49.4th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| qnap | ai_core | 3.4.0 |
| qnap | ai_core | 3.4.0 |
| QNAP Systems Inc. | QNAP AI Core | 3.4.x |
Timeline
- Nov 22, 2024 CVE Published
- Nov 23, 2024 EPSS Score
- Nov 26, 2024 PoC Published
- Dec 12, 2024 EPSS Score
- Dec 30, 2024 EPSS Score
- Jan 17, 2025 EPSS Score
- Feb 4, 2025 EPSS Score
- Feb 22, 2025 EPSS Score
- Mar 12, 2025 EPSS Score
- Mar 30, 2025 EPSS Score
- Mar 30, 2025 Coalition ESS Score
- Apr 16, 2025 EPSS Score
References
- https://www.qnap.com/go/security-advisory/qsa-24-36 advisory
- https://www.qnap.com/go/security-advisory/qsa-24-46 advisory
- https://www.qnap.com/go/security-advisory/qsa-24-43 advisory
- https://www.qnap.com/go/security-advisory/qsa-24-44 advisory
- https://www.qnap.com/en/security-advisory/qsa-24-40 url
- https://www.qnap.com/go/security-advisory/qsa-24-37 advisory
- https://www.qnap.com/go/security-advisory/qsa-24-39 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-38647 advisory
- https://www.qnap.com/go/security-advisory/qsa-24-47 advisory
- https://www.qnap.com/go/security-advisory/qsa-24-40 advisory