CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2024-38643

A missing authentication for critical function vulnerability has been reported to affect Notes Station 3. If exploited, the vulnerability could allow remote attackers to gain access to and execute certain functions. We have already fixed the vulnerability in the following version: Notes Station 3 3.9.7 and later

Exploit prediction scoring system (EPSS) score

EPSS Score 0.004

EPSS Ranking 62.4%

CVSS Severity

CVSS v3 Score 9.8

References

https://www.qnap.com/en/security-advisory/qsa-24-36

Products affected by CVE-2024-38643

Qnap » Notes Station 3 » Version: 3.9.0

cpe:2.3:a:qnap:notes_station_3:3.9.0
Qnap » Notes Station 3 » Version: 3.9.1

cpe:2.3:a:qnap:notes_station_3:3.9.1
Qnap » Notes Station 3 » Version: 3.9.2

cpe:2.3:a:qnap:notes_station_3:3.9.2
Qnap » Notes Station 3 » Version: 3.9.3

cpe:2.3:a:qnap:notes_station_3:3.9.3
Qnap » Notes Station 3 » Version: 3.9.4

cpe:2.3:a:qnap:notes_station_3:3.9.4
Qnap » Notes Station 3 » Version: 3.9.5

cpe:2.3:a:qnap:notes_station_3:3.9.5
Qnap » Notes Station 3 » Version: 3.9.6

cpe:2.3:a:qnap:notes_station_3:3.9.6

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2024-38643

Products

Pricing

Contact Us