CVE-2024-32764 - Vulnerability Details - OpenCVE

A missing authentication for critical function vulnerability has been reported to affect myQNAPcloud Link. If exploited, the vulnerability could allow users with the privilege level of some functionality via a network. We have already fixed the vulnerability in the following version: myQNAPcloud Link 2.4.51 and later

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Changed

Confidentiality Impact Low

Integrity Impact High

Availability Impact Low

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Qnap	Myqnapcloud Link

Configuration 1 [-]

cpe:2.3:a:qnap:myqnapcloud_link:*:*:*:*:*:*:*:*

No data.

References

Link	Providers
https://www.qnap.com/en/security-advisory/qsa-24-09

History

Wed, 10 Dec 2025 22:00:00 +0000

Type	Values Removed	Values Added
First Time appeared		Qnap Qnap myqnapcloud Link
CPEs		cpe:2.3:a:qnap:myqnapcloud_link::::::::
Vendors & Products		Qnap Qnap myqnapcloud Link

MITRE

Status: PUBLISHED

Assigner: qnap

Published: 2024-04-26T15:00:51.334Z

Updated: 2024-08-02T02:20:35.321Z

Reserved: 2024-04-18T08:14:16.553Z

Link: CVE-2024-32764

Vulnrichment

Updated: 2024-08-02T02:20:35.321Z

NVD

Status : Analyzed

Published: 2024-04-26T15:15:48.743

Modified: 2025-12-10T21:52:00.490

Link: CVE-2024-32764

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-32764", "assignerOrgId": "2fd009eb-170a-4625-932b-17a53af1051f", "state": "PUBLISHED", "assignerShortName": "qnap", "dateReserved": "2024-04-18T08:14:16.553Z", "datePublished": "2024-04-26T15:00:51.334Z", "dateUpdated": "2024-08-02T02:20:35.321Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "myQNAPcloud Link", "vendor": "QNAP Systems Inc.", "versions": [{"lessThan": "2.4.51", "status": "affected", "version": "2.4.x", "versionType": "custom"}]}], "credits": [{"lang": "en", "type": "finder", "value": "ZDI-CAN-22457/22458: Team ECQ"}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "A missing authentication for critical function vulnerability has been reported to affect myQNAPcloud Link. If exploited, the vulnerability could allow users with the privilege level of some functionality via a network.<br><br>We have already fixed the vulnerability in the following version:<br>myQNAPcloud Link 2.4.51 and later<br>"}], "value": "A missing authentication for critical function vulnerability has been reported to affect myQNAPcloud Link. If exploited, the vulnerability could allow users with the privilege level of some functionality via a network.\n\nWe have already fixed the vulnerability in the following version:\nmyQNAPcloud Link 2.4.51 and later\n"}], "impacts": [{"capecId": "CAPEC-36", "descriptions": [{"lang": "en", "value": "CAPEC-36"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 9.9, "baseSeverity": "CRITICAL", "confidentialityImpact": "LOW", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:L", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-306", "description": "CWE-306", "lang": "en", "type": "CWE"}, {"cweId": "CWE-346", "description": "CWE-346", "lang": "en", "type": "CWE"}, {"cweId": "CWE-749", "description": "CWE-749", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "2fd009eb-170a-4625-932b-17a53af1051f", "shortName": "qnap", "dateUpdated": "2024-04-26T15:00:51.334Z"}, "references": [{"url": "https://www.qnap.com/en/security-advisory/qsa-24-09"}], "solutions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "We have already fixed the vulnerability in the following version:<br>myQNAPcloud Link 2.4.51 and later<br>"}], "value": "We have already fixed the vulnerability in the following version:\nmyQNAPcloud Link 2.4.51 and later\n"}], "source": {"advisory": "QSA-24-09", "discovery": "EXTERNAL"}, "title": "myQNAPcloud Link", "x_generator": {"engine": "Vulnogram 0.1.0-dev"}}, "adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-32764", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-06-03T17:31:11.291616Z"}}}], "affected": [{"cpes": ["cpe:2.3:a:qnap:myqnapcloud_link:2.4:*:*:*:*:*:*:*"], "vendor": "qnap", "product": "myqnapcloud_link", "versions": [{"status": "affected", "version": "2.4", "lessThan": "2.4.51", "versionType": "custom"}], "defaultStatus": "unknown"}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-06-04T17:50:44.406Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T02:20:35.321Z"}, "title": "CVE Program Container", "references": [{"url": "https://www.qnap.com/en/security-advisory/qsa-24-09", "tags": ["x_transferred"]}]}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://www.qnap.com/en/security-advisory/qsa-24-09", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T02:20:35.321Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-32764", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-06-03T17:31:11.291616Z"}}}], "affected": [{"cpes": ["cpe:2.3:a:qnap:myqnapcloud_link:2.4:*:*:*:*:*:*:*"], "vendor": "qnap", "product": "myqnapcloud_link", "versions": [{"status": "affected", "version": "2.4", "lessThan": "2.4.51", "versionType": "custom"}], "defaultStatus": "unknown"}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-04-26T17:00:40.204Z"}}], "cna": {"title": "myQNAPcloud Link", "source": {"advisory": "QSA-24-09", "discovery": "EXTERNAL"}, "credits": [{"lang": "en", "type": "finder", "value": "ZDI-CAN-22457/22458: Team ECQ"}], "impacts": [{"capecId": "CAPEC-36", "descriptions": [{"lang": "en", "value": "CAPEC-36"}]}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "CHANGED", "version": "3.1", "baseScore": 9.9, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:L", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "QNAP Systems Inc.", "product": "myQNAPcloud Link", "versions": [{"status": "affected", "version": "2.4.x", "lessThan": "2.4.51", "versionType": "custom"}], "defaultStatus": "unaffected"}], "solutions": [{"lang": "en", "value": "We have already fixed the vulnerability in the following version:\nmyQNAPcloud Link 2.4.51 and later\n", "supportingMedia": [{"type": "text/html", "value": "We have already fixed the vulnerability in the following version:<br>myQNAPcloud Link 2.4.51 and later<br>", "base64": false}]}], "references": [{"url": "https://www.qnap.com/en/security-advisory/qsa-24-09"}], "x_generator": {"engine": "Vulnogram 0.1.0-dev"}, "descriptions": [{"lang": "en", "value": "A missing authentication for critical function vulnerability has been reported to affect myQNAPcloud Link. If exploited, the vulnerability could allow users with the privilege level of some functionality via a network.\n\nWe have already fixed the vulnerability in the following version:\nmyQNAPcloud Link 2.4.51 and later\n", "supportingMedia": [{"type": "text/html", "value": "A missing authentication for critical function vulnerability has been reported to affect myQNAPcloud Link. If exploited, the vulnerability could allow users with the privilege level of some functionality via a network.<br><br>We have already fixed the vulnerability in the following version:<br>myQNAPcloud Link 2.4.51 and later<br>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-306", "description": "CWE-306"}, {"lang": "en", "type": "CWE", "cweId": "CWE-346", "description": "CWE-346"}, {"lang": "en", "type": "CWE", "cweId": "CWE-749", "description": "CWE-749"}]}], "providerMetadata": {"orgId": "2fd009eb-170a-4625-932b-17a53af1051f", "shortName": "qnap", "dateUpdated": "2024-04-26T15:00:51.334Z"}}}, "cveMetadata": {"cveId": "CVE-2024-32764", "state": "PUBLISHED", "dateUpdated": "2024-08-02T02:20:35.321Z", "dateReserved": "2024-04-18T08:14:16.553Z", "assignerOrgId": "2fd009eb-170a-4625-932b-17a53af1051f", "datePublished": "2024-04-26T15:00:51.334Z", "assignerShortName": "qnap"}, "dataVersion": "5.1"}