CVE-2024-50389: QuRouter
Published Dec 6, 2024
·Updated
A SQL injection vulnerability has been reported to affect QuRouter. If exploited, the vulnerability could allow remote attackers to inject malicious code.
We have already fixed the vulnerability in the following version: QuRouter 2.4.5.032 and later
Affected Software
8 affected components
QuRouter QuRouter<2.4.5.032
QNAP Qurouter=2.4.0.190-build_20240522
QNAP Qurouter=2.4.1.172-build_20240606
QNAP Qurouter=2.4.1.634-build_20240710
QNAP Qurouter=2.4.2.317-build_20240903
QNAP Qurouter=2.4.2.538-build_20240923
QNAP Qurouter=2.4.3.103-build_20241011
QNAP Qurouter=2.4.4.106-build_20241017
Remediation
Information
We have already fixed the vulnerability in the following version:
QuRouter 2.4.5.032 and later
Event History
Dec 6, 2024
CVE Published
via MITRE·04:35 PM
Data Sourced
via MITRE·04:35 PM
RemedyDescriptionWeakness
Data Sourced
via NVD·05:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-50389?
CVE-2024-50389 is considered a high severity SQL injection vulnerability affecting QuRouter.
2
How do I fix CVE-2024-50389?
To fix CVE-2024-50389, upgrade to QuRouter version 2.4.5.032 or later.
3
What types of attacks can be executed by exploiting CVE-2024-50389?
Exploiting CVE-2024-50389 can allow remote attackers to execute arbitrary SQL queries against the database.
4
Is CVE-2024-50389 present in older versions of QuRouter?
Yes, CVE-2024-50389 is present in QuRouter versions prior to 2.4.5.032.
5
Has CVE-2024-50389 been officially patched?
Yes, CVE-2024-50389 has been officially patched in QuRouter version 2.4.5.032 and later.