CVE-2025-54151CWE-400CWE-770CWE-789
Qsync Central
Medium · published February 11, 2026
What it is
An uncontrolled resource consumption vulnerability has been reported to affect Qsync Central. If a local attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack.
We have already fixed the vulnerability in the following version:
Qsync Central 5.0.0.4 ( 2026/01/20 ) and later
The record
Technical detail
- CVSS v4.0
- 4.9 · MEDIUM
- Vector
- CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U
- EPSS
- 0.00273 · 18.6th percentile
- Weaknesses
- CWE-400 · Uncontrolled Resource Consumption; CWE-770 · Allocation of Resources Without Limits or Throttling; CWE-789 · Memory Allocation with Excessive Size Value
- Published
- 2026-02-11T12:18Z
EPSS history
Timeline
11 FEB 12:18Z
Qsync Central
cvelistv5