VDB

CVE-2024-48861

CVE-2024-48861 PUBLISHED CVSS 7.300000190734863 HIGH

An OS command injection vulnerability has been reported to affect several product versions. If exploited, the vulnerability could allow local network attackers to execute commands. We have already fixed the vulnerability in the following versions: QuRouter 2.4.4.106 and later

EPSS 0.41% · 61.4th percentile

Risk Scores

CVSS 4.0
7.300000190734863
CVSS:4.0/AV:P/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
EPSS Score
0.41%
61.4th percentile

Affected Products

VendorProductVersions
qnapqurouter2.4.0
qnapqurouter2.4.0.190, 2.4.1.172, 2.4.1.634
QNAP Systems Inc.QuRouter2.4.x

Timeline

  • Nov 22, 2024 CVE Published
  • Nov 22, 2024 PoC Published
  • Nov 22, 2024 PoC Published
  • Nov 23, 2024 EPSS Score
  • Nov 26, 2024 CVE Updated
  • Nov 26, 2024 PoC Published
  • Nov 26, 2024 PoC Published
  • Dec 11, 2024 EPSS Score
  • Dec 29, 2024 EPSS Score
  • Jan 15, 2025 EPSS Score
  • Feb 1, 2025 EPSS Score
  • Feb 7, 2025 Coalition ESS Score

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›