CVE-2024-53694highCWE-367

CVE-2024-53694: falha de alta gravidade em QNAP Systems Inc. QVPN Device Client for Mac

QVPN Device Client, Qsync, Qfinder Pro

Publicada em

Seguir esta CVE+ Monitorar Qsync+ Monitorar Qfinder Pro Mac

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 8.6epss 0.1%
A time-of-check time-of-use (TOCTOU) race condition vulnerability has been reported to affect several product versions. If exploited, the vulnerability could allow local attackers who have gained user access to gain access to otherwise unauthorized resources. We have already fixed the vulnerability in the following versions: QVPN Device Client for Mac 2.2.5 and later Qsync for Mac 5.1.3 and later Qfinder Pro Mac 7.11.1 and later
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
Produtos afetados
QNAP Systems Inc. · Qfinder Pro MacQNAP Systems Inc. · Qsync for MacQNAP Systems Inc. · QVPN Device Client for Mac
CVEs relacionadas — QNAP Systems Inc. QVPN Device Client for Mac

No mesmo produto, das mais perigosas para as menos.

CVE-2025-53594MEDIUMQfinder Pro, Qsync, QVPNEPSS 0.1%