CVE-2025-62847
Gravedad CVSS v4.0:
MEDIA
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
16/12/2025
Última modificación:
16/12/2025
Descripción
*** Pendiente de traducción *** An improper neutralization of argument delimiters in a command vulnerability has been reported to affect several QNAP operating system versions. The remote attackers can then exploit the vulnerability to alter execution logic.<br />
<br />
We have already fixed the vulnerability in the following versions:<br />
QTS 5.2.7.3297 build 20251024 and later<br />
QuTS hero h5.2.7.3297 build 20251024 and later<br />
QuTS hero h5.3.1.3292 build 20251024 and later