CVE-2024-53695 MEDIUM

CVE-2024-53695: HBS 3 Hybrid Backup Sync

Vendor Qnap Systems Inc.
Product HBS 3 Hybrid Backup Sync
Weakness CWE-120
Published March 7, 2025
Last update March 7, 2025
View on NVD All CVEs

CVSS base score

6.3/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

What the vulnerability does

01Description

A buffer overflow vulnerability has been reported to affect HBS 3 Hybrid Backup Sync. If exploited, the vulnerability could allow remote attackers to modify memory or crash processes. We have already fixed the vulnerability in the following version: HBS 3 Hybrid Backup Sync 25.1.4.952 and later

Key dates

02Disclosure timeline

March 7, 2025 CVE published
March 7, 2025 Record updated