Skip to content
CVE PROGRAM SOURCE RECORD4.6 Medium

CVE-2025-68403

Inadequate Steps to Confirm Vulnerability in QuRouter

Description

An external control of system or configuration setting vulnerability has been reported to affect QuRouter. If a local attacker gains an administrator account, they can then exploit the vulnerability to modify data on the system. We have already fixed the vulnerability in the following version: QuRouter 2.7.2.113 and later

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

QNAP Systems Inc. QuRouter

Default version status: unaffected

  • 2.7.x to < 2.7.2.113affected

References