CVE-2024-48861 Information

Description

An OS command injection vulnerability has been reported to affect several product versions. If exploited the vulnerability could allow local network attackers to execute commands.

We have already fixed the vulnerability in the following versions: QuRouter 2.4.4.106 and later

Reference

https://www.qnap.com/en/security-advisory/qsa-24-44