CVE-2024-14025 LOW

CVE-2024-14025: Video Station

Vendor Qnap Systems Inc.
Product Video Station
Weakness CWE-89 · SQLi
Published March 11, 2026
Last update March 11, 2026

CVSS base score

0.1/10
Attack vector Physical
Attack complexity Low
Privileges required High
User interaction None
Confidentiality
Integrity

CVSS vector

CVSS:4.0/AV:P/AC:L/AT:P/PR:H/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/E:U

What the vulnerability does

01Description

An SQL injection vulnerability has been reported to affect Video Station. If an attacker gains local network access who have also gained an administrator account, they can then exploit the vulnerability to execute unauthorized code or commands. We have already fixed the vulnerability in the following version: Video Station 5.8.2 and later

Key dates

02Disclosure timeline

March 11, 2026 CVE published
March 11, 2026 Record updated