CVE-2025-22482: Qsync Central
A use of externally-controlled format string vulnerability has been reported to affect Qsync Central. If exploited, the vulnerability could allow remote attackers who have gained user access to obtain secret data or modify memory.
We have already fixed the vulnerability in the following version: Qsync Central 4.5.0.6 ( 2025/03/20 ) and later
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2025-22482?
CVE-2025-22482 has been classified as a high severity vulnerability due to its potential for remote exploitation and sensitive data exposure.
How do I fix CVE-2025-22482?
To fix CVE-2025-22482, users should update to the latest version of Qsync Central that includes the security patch for this vulnerability.
What types of attacks could exploit CVE-2025-22482?
Exploitation of CVE-2025-22482 could allow attackers to obtain secret data or modify memory if they have gained user access.
Which versions of Qsync Central are affected by CVE-2025-22482?
CVE-2025-22482 affects versions of Qsync Central prior to 4.5.0.6.
Who is affected by CVE-2025-22482?
Any user of Qsync Central versions before 4.5.0.6 is at risk of CVE-2025-22482 if their systems are accessed by remote attackers.