CVE-2024-13086 MEDIUM

CVE-2024-13086: QTS, QuTS hero

Vendor Qnap Systems Inc.
Product QTS
Weakness CWE-200 · Info exposure
Published March 7, 2025
Last update March 7, 2025
View on NVD All CVEs

CVSS base score

5.3/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality Low
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

What the vulnerability does

01Description

An exposure of sensitive information vulnerability has been reported to affect product. If exploited, the vulnerability could allow remote attackers to compromise the security of the system. We have already fixed the vulnerability in the following version: QTS 5.2.0.2851 build 20240808 and later QuTS hero h5.2.0.2851 build 20240808 and later

Key dates

02Disclosure timeline

March 7, 2025 CVE published
March 7, 2025 Record updated

Related vulnerabilities

04Related CVE

CVE-2026-42973 Windows Push Notification Information Disclosure Vulnerability CVE-2026-44486 Axios: Proxy-Authorization header leaks to redirect target when proxy is re-evaluated to direct connection CVE-2026-45594 Windows Application Identity (AppID) Information Disclosure Vulnerability CVE-2026-56318 Capgo - Information Disclosure via /private/validate_password_compliance Endpoint CVE-2026-58033 "Total number of distinct authors" statistic at action=info does not exclude revisions where the author name was deleted