Vulnerability · Published Nov 22, 2024 · Assigned by qnap
CVE-2024-48862QuLog Center
High 8.7
In plain English
A high-severity security flaw in QuLog Center from QNAP Systems Inc.. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.9% (higher than 60% of all known vulnerabilities).
Official description
A link following vulnerability has been reported to affect QuLog Center. If exploited, the vulnerability could allow remote attackers to traverse the file system to unintended locations and read or overwrite the contents of unexpected files. We have already fixed the vulnerability in the following versions: QuLog Center 1.7.0.831 ( 2024/10/15 ) and later QuLog Center 1.8.0.888 ( 2024/10/15 ) and later
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| QNAP Systems Inc. | QuLog Center | 1.7.x.x – before 1.7.0.831 ( 2024/10/15 )1.8.x.x – before 1.8.0.888 ( 2024/10/15 ) |
Weakness: CWE-59 · Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N