QNAP QuRouter Command Injection Vulnerability
Vulnerability
A command injection vulnerability exists in QNAP QuRouter versions 2.4.x. This vulnerability allows remote attackers to execute arbitrary commands on the affected system.
Impact
Exploitation of this vulnerability could lead to unauthorized command execution on the affected device.
Remediation
Users can update to QuRouter version 2.4.5.032 or later to address this vulnerability. For those using an older version, the latest firmware can be downloaded from the QNAP Download Center or through the QuRouter interface by selecting 'Firmware' and then 'Update now'.
Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
10.0exploitability
6.4remediation
7.7relevance
0.0threat
0.0urgency
2.9incentive
1.7Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.