What is the severity of CVE-2024-50388?

CVE-2024-50388 has a high severity rating due to its potential for remote command execution by attackers.

How do I fix CVE-2024-50388?

To mitigate CVE-2024-50388, you should upgrade to HBS 3 Hybrid Backup Sync version 25.1.1.673 or later.

What systems are affected by CVE-2024-50388?

CVE-2024-50388 affects HBS 3 Hybrid Backup Sync versions before 25.1.1.673.

What type of vulnerability is CVE-2024-50388?

CVE-2024-50388 is classified as an OS command injection vulnerability.

Can CVE-2024-50388 be exploited remotely?

Yes, CVE-2024-50388 can be exploited remotely by attackers to execute commands.

Vulnerability/
CVE-2024-50388

critical

9.5

CWE

77 78

6/12/2024

CVE-2024-50388: HBS 3 Hybrid Backup Sync

First published: Fri Dec 06 2024(Updated: )

An OS command injection vulnerability has been reported to affect HBS 3 Hybrid Backup Sync. If exploited, the vulnerability could allow remote attackers to execute commands. We have already fixed the vulnerability in the following version: HBS 3 Hybrid Backup Sync 25.1.1.673 and later

Credit: security@qnapsecurity.com.tw

Affected Software	Affected Version	How to fix
HBS Hybrid Backup Sync	<25.1.1.673

Remedy

We have already fixed the vulnerability in the following version: HBS 3 Hybrid Backup Sync 25.1.1.673 and later

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2024-50388?
CVE-2024-50388 has a high severity rating due to its potential for remote command execution by attackers.
How do I fix CVE-2024-50388?
To mitigate CVE-2024-50388, you should upgrade to HBS 3 Hybrid Backup Sync version 25.1.1.673 or later.
What systems are affected by CVE-2024-50388?
CVE-2024-50388 affects HBS 3 Hybrid Backup Sync versions before 25.1.1.673.
What type of vulnerability is CVE-2024-50388?
CVE-2024-50388 is classified as an OS command injection vulnerability.
Can CVE-2024-50388 be exploited remotely?
Yes, CVE-2024-50388 can be exploited remotely by attackers to execute commands.

collector/bleeping-computer
source/BleepingComputer
alias/CVE-2024-50388
alias/CVE-2021-28799
alias/CVE-2020-36195
agent/remedy
agent/weakness
agent/title
agent/references
agent/description
agent/type
agent/first-publish-date
collector/nvd-api
source/NVD
agent/severity
agent/author
agent/event
collector/mitre-cve
source/MITRE
agent/last-modified-date
agent/trending
agent/source
agent/softwarecombine
agent/tags
agent/guess-ai
agent/software-canonical-lookup
agent/software-canonical-lookup-request
vendor/hbs
canonical/hbs hybrid backup sync

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.