Read the docs
TI-2024-35894 Aliases CVE-2024-53696GHSA-q469-433j-8xc2

Server-side request forgery in QNAP QuLog Center

Priority LOW 24CWE-918Published · Updated

Key facts

Attack vector
Network
Privileges required
High
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
Information disclosure
Confidentiality · integrity · availability
Low · None · None
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-918 and the CVSS impact.

Summary

A server-side request forgery (SSRF) vulnerability has been reported to affect QuLog Center. If exploited, the vulnerability could allow remote attackers who have gained administrator access to read application data. We have already fixed the vulnerability in the following versions: QuLog Center 1.7.0.829 ( 2024/10/01 ) and later QuLog Center 1.8.0.888 ( 2024/10/15 ) and later QTS 4.5.4.2957 build 20241119 and later QuTS hero h4.5.4.2956 build 20241119 and later

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00445 38th percentileScored 2026-11-07
Fix Fixed QuLog Center (QNAP Systems Inc.): 1.7.0.829 ( 2024/10/01 ), 1.8.0.888 ( 2024/10/15 )QTS (QNAP Systems Inc.): 4.5.4.2957 build 20241119+1 more product

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
QNAPQuLog Center1.7.x.x to before 1.7.0.829 ( 2024/10/01 ); 1.8.x.x to before 1.8.0.888 ( 2024/10/15 )1.7.0.829 ( 2024/10/01 ), 1.8.0.888 ( 2024/10/15 )Patch availableCNA
QNAPQTS4.5.x to before 4.5.4.2957 build 202411194.5.4.2957 build 20241119Patch availableCNA
QNAPQuTS heroh4.5.x to before h4.5.4.2956 build 20241119h4.5.4.2956 build 20241119Patch availableCNA
  • QuLog Center VendorQNAP Affected 1.7.x.x to before 1.7.0.829 ( 2024/10/01 ); 1.8.x.x to before 1.8.0.888 ( 2024/10/15 ) Fixed in 1.7.0.829 ( 2024/10/01 ), 1.8.0.888 ( 2024/10/15 ) Patch available CNA
  • QTS VendorQNAP Affected 4.5.x to before 4.5.4.2957 build 20241119 Fixed in 4.5.4.2957 build 20241119 Patch available CNA
  • QuTS hero VendorQNAP Affected h4.5.x to before h4.5.4.2956 build 20241119 Fixed in h4.5.4.2956 build 20241119 Patch available CNA

CPE configurations NVD · 3

CPEVersionsRoleVendor
cpe:2.3:a:qnap:qulog_center:*:*:*:*:*:*:*:*1.7.0 to before 1.7.0.829; 1.8.0 to before 1.8.0.888VulnerableQNAP
cpe:2.3:o:qnap:qts:*:-:*:*:*:*:*:*4.5.1 to before 4.5.4.2957VulnerableQNAP
cpe:2.3:o:qnap:quts_hero:*:-:*:*:*:*:*:*h4.5.0 to before h4.5.4.2476VulnerableQNAP
  • cpe:2.3:a:qnap:qulog_center:*:*:*:*:*:*:*:* Versions 1.7.0 to before 1.7.0.829; 1.8.0 to before 1.8.0.888 Vulnerable ·QNAP
  • cpe:2.3:o:qnap:qts:*:-:*:*:*:*:*:* Versions 4.5.1 to before 4.5.4.2957 Vulnerable ·QNAP
  • cpe:2.3:o:qnap:quts_hero:*:-:*:*:*:*:*:* Versions h4.5.0 to before h4.5.4.2476 Vulnerable ·QNAP

Remediation

  • Fix · CNA QuLog Center (QNAP Systems Inc.) Fixed in 1.7.0.829 ( 2024/10/01 ), 1.8.0.888 ( 2024/10/15 )
  • Fix · CNA QTS (QNAP Systems Inc.) Fixed in 4.5.4.2957 build 20241119
  • Fix · CNA QuTS hero (QNAP Systems Inc.) Fixed in h4.5.4.2956 build 20241119

Timeline

  1. 2026-10-02 Threatist record created from CVE-2024-53696
  2. 2026-10-03 Alias added: GHSA-q469-433j-8xc2

References

Advisory 1

  • TI-2020-02221 Command Injection Vulnerability in QTS and QuTS hero KEVCVSS 3.1CRITICAL 9.8
  • TI-2019-05101 Improper input validation in QNAP NAS devices KEVCVSS 3.1CRITICAL 9.8
  • TI-2018-14137 Improper input validation in QNAP QTS KEVCVSS 3.1CRITICAL 9.8
  • TI-2014-05975 GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed… KEVCVSS 3.1CRITICAL 9.8
  • TI-2014-05157 GNU Bash through 4.3 processes trailing strings after function definitions in the values… KEVCVSS 3.1CRITICAL 9.8
  • TI-2018-14131 Cross-site scripting in QNAP QTS KEVCVSS 3.1HIGH 8.0
See all 282 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences