CVE-2025-22482CWE-134

Qsync Central

Low · published June 6, 2025

CVSS v4.0
2.3
EPSS
0%
Percentile
30.1
In the wild
Unconfirmed
What it is

A use of externally-controlled format string vulnerability has been reported to affect Qsync Central. If exploited, the vulnerability could allow remote attackers who have gained user access to obtain secret data or modify memory.

We have already fixed the vulnerability in the following version:

Qsync Central 4.5.0.6 ( 2025/03/20 ) and later

The record
Technical detail
CVSS v4.0
2.3 · LOW
Vector
CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L
EPSS
0.00373 · 30.1th percentile
Weakness
CWE-134 · Use of Externally-Controlled Format String
Published
2025-06-06T15:53Z
EPSS history
Timeline
  • 06 JUN 15:53Z
    Qsync Central
    cvelistv5