VDB
CVE-2024-38647
CVE-2024-38647
PUBLISHED
CVSS 7.900000095367432 HIGH
An exposure of sensitive information vulnerability has been reported to affect QNAP AI Core. If exploited, the vulnerability could allow remote attackers to compromise the security of the system. We have already fixed the vulnerability in the following version: QNAP AI Core 3.4.1 and later
EPSS 0.64% · 47.5th percentile
Risk Scores
CVSS 4.0
7.900000095367432
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:H/SI:H/SA:H
EPSS Score
0.64%
47.5th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| qnap | ai_core | 3.4.0 |
| qnap | ai_core | 3.4.0 |
| QNAP Systems Inc. | QNAP AI Core | 3.4.x |
Timeline
- Nov 22, 2024 CVE Published
- Nov 23, 2024 EPSS Score
- Nov 26, 2024 PoC Published
- Dec 11, 2024 EPSS Score
- Dec 29, 2024 EPSS Score
- Jan 15, 2025 EPSS Score
- Feb 1, 2025 EPSS Score
- Feb 19, 2025 EPSS Score
- Mar 8, 2025 EPSS Score
- Mar 25, 2025 EPSS Score
- Mar 30, 2025 Coalition ESS Score
- Apr 12, 2025 EPSS Score
References
- https://www.qnap.com/go/security-advisory/qsa-24-36 advisory
- https://www.qnap.com/go/security-advisory/qsa-24-46 advisory
- https://www.qnap.com/go/security-advisory/qsa-24-43 advisory
- https://www.qnap.com/go/security-advisory/qsa-24-44 advisory
- https://www.qnap.com/en/security-advisory/qsa-24-40 url
- https://www.qnap.com/go/security-advisory/qsa-24-37 advisory
- https://www.qnap.com/go/security-advisory/qsa-24-39 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-38647 advisory
- https://www.qnap.com/go/security-advisory/qsa-24-47 advisory
- https://www.qnap.com/go/security-advisory/qsa-24-40 advisory