What is CVE-2024-48863?

CVE-2024-48863 is a critical-severity vulnerability in Qnap License_center, classified under OS Command Injection. CVSS score: 9.8/10. Published 2024-12-06.

How severe is CVE-2024-48863?

Critical severity. CVSS v3 base score is 9.8 out of 10.

RCE in Qnap License_center

CVE-2024-48863

A command injection vulnerability has been reported to affect License Center. If exploited, the vulnerability could allow remote attackers to execute arbitrary commands. We have already fixed the vulnerability in the following version: Li…

Vulnerability class: Command Injection (OS Command Injection)

EPSS: 0.010 (60.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Qnap License_center
Qnap Systems Inc. License Center — versions 1.9.x

Weakness classification (CWE)

CWE-78 — OS Command Injection

References

security@qnapsecurity.com.tw (Vendor Advisory)

Frequently asked questions

What is CVE-2024-48863?: CVE-2024-48863 is a critical-severity vulnerability in Qnap License_center, classified under OS Command Injection. CVSS score: 9.8/10. Published 2024-12-06.
How severe is CVE-2024-48863?: Critical severity. CVSS v3 base score is 9.8 out of 10.