CVE-2024-38647CWE-200CWE-540

QNAP AI Core

High · published November 22, 2024

CVSS v4.0
7.9
EPSS
1%
Percentile
50.7
In the wild
Unconfirmed
What it is

An exposure of sensitive information vulnerability has been reported to affect QNAP AI Core. If exploited, the vulnerability could allow remote attackers to compromise the security of the system.

We have already fixed the vulnerability in the following version:

QNAP AI Core 3.4.1 and later

The record
Technical detail
CVSS v4.0
7.9 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:H/SI:H/SA:H
EPSS
0.00653 · 50.7th percentile
Weaknesses
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor; CWE-540 · Inclusion of Sensitive Information in Source Code
Published
2024-11-22T15:32Z
EPSS history
Timeline
  • 22 NOV 15:32Z
    QNAP AI Core
    cvelistv5