CVE-2024-50395mediumCWE-639

CVE-2024-50395: falha de média gravidade em QNAP Systems Inc. Media Streaming add-on

Media Streaming add-on

Publicada em

Seguir esta CVE+ Monitorar Media Streaming add-on

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 6.9epss 1.4%
An authorization bypass through user-controlled key vulnerability has been reported to affect Media Streaming add-on. If exploited, the vulnerability could allow local network attackers to gain privilege. We have already fixed the vulnerability in the following version: Media Streaming add-on 500.1.1.6 ( 2024/08/02 ) and later
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
Produtos afetados
QNAP Systems Inc. · Media Streaming add-on
CVEs relacionadas — QNAP Systems Inc. Media Streaming add-on

No mesmo produto, das mais perigosas para as menos.

CVE-2023-23369CRITICALQTS, Multimedia Console, and Media Streaming add-onEPSS 14.1%CVE-2020-36195CRITICALSQL Injection Vulnerability in Multimedia Console and the Media Streaming Add-OnEPSS 1.8%CVE-2021-34362HIGHCommand Injection Vulnerability in Media Streaming Add-onEPSS 1.3%CVE-2023-47220MEDIUMMedia Streaming add-onEPSS 1.2%CVE-2024-56808LOWMedia Streaming add-onEPSS 0.6%CVE-2023-47222CRITICALMedia Streaming add-onEPSS 0.5%