Skip to content
CVE PROGRAM SOURCE RECORD7.7 High

CVE-2024-50390

QHora

Description

A command injection vulnerability has been reported to affect QHora. If exploited, the vulnerability could allow remote attackers to execute arbitrary commands. We have already fixed the vulnerability in the following version: QuRouter 2.4.5.032 and later

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

QNAP Systems Inc. QuRouter

Default version status: unaffected

  • 2.4.x to < 2.4.5.032affected

References