QwikSec

Security Database

CVE

CWE

Training

CVE-2024-50388

Published: Dec 6, 2024

Modified: Dec 6, 2024

PUBLISHED

Description

An OS command injection vulnerability has been reported to affect HBS 3 Hybrid Backup Sync. If exploited, the vulnerability could allow remote attackers to execute commands. We have already fixed the vulnerability in the following version: HBS 3 Hybrid Backup Sync 25.1.1.673 and later

Vendor	Product	Versions
QNAP Systems Inc.	HBS 3 Hybrid Backup Sync	affected `25.1.x - < 25.1.1.673`

Weaknesses (CWE)

References

https://www.qnap.com/en/security-advisory/qsa-24-41

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.