CVE-2025-53594mediumCWE-22CWE-367CWE-59

CVE-2025-53594: falha de média gravidade em QNAP Systems Inc. Qfinder Pro Mac

Qfinder Pro, Qsync, QVPN

Publicada em

Seguir esta CVE+ Monitorar Qsync+ Monitorar Qfinder Pro Mac

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 4.4epss 0.1%
A path traversal vulnerability has been reported to affect several product versions. If a local attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following versions: Qfinder Pro Mac 7.13.0 and later Qsync for Mac 5.1.5 and later QVPN Device Client for Mac 2.2.8 and later
CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U
Produtos afetados
QNAP Systems Inc. · Qfinder Pro MacQNAP Systems Inc. · Qsync for MacQNAP Systems Inc. · QVPN Device Client for Mac
CVEs relacionadas — QNAP Systems Inc. Qfinder Pro Mac

No mesmo produto, das mais perigosas para as menos.

CVE-2024-53694HIGHQVPN Device Client, Qsync, Qfinder ProEPSS 0.1%