CVE-2024-13088CWE-287

QHora

Medium · published June 6, 2025

CVSS v4.0

5.2

EPSS

Percentile

17.4

In the wild

Unconfirmed

What it is

An improper authentication vulnerability has been reported to affect QHora. If an attacker gains local network access, they can then exploit the vulnerability to compromise the security of the system.

We have already fixed the vulnerability in the following version:

QuRouter 2.5.0.140 and later

The record

Technical detail

CVSS v4.0: 5.2 · MEDIUM
Vector: CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:P/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N
EPSS: 0.00265 · 17.4th percentile
Weakness: CWE-287 · Improper Authentication
Published: 2025-06-06T15:53Z

EPSS history

Timeline

06 JUN 15:53Z
QHora
cvelistv5