QTS, QuTS hero_CVE-2025-62848

8.1 / 10

HIGH

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U

Description

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. The remote attackers can then exploit the vulnerability to launch a denial-of-service (DoS) attack.

We have already fixed the vulnerability in the following versions:
QTS 5.2.7.3297 build 20251024 and later
QuTS hero h5.2.7.3297 build 20251024 and later
QuTS hero h5.3.1.3292 build 20251024 and later

Basic Information

ID CVE-2025-62848

Source qnap

Published Dec 16, 2025 at 02:25

Affected Product

Vendor QNAP Systems Inc.

Product QTS

Version 5.2.x

Affected Versions QNAP Systems Inc. QTS 5.2.x
QNAP Systems Inc. QuTS hero h5.2.x
QNAP Systems Inc. QuTS hero h5.3.x

CWE Classification

CWE-476

References

www.qnap.com /en/security-advisory/qsa-25-45

{
    "lastseen": "",
    "description": "A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. The remote attackers can then exploit the vulnerability to launch a denial-of-service (DoS) attack.\n\nWe have already fixed the vulnerability in the following versions:\nQTS 5.2.7.3297 build 20251024 and later\nQuTS hero h5.2.7.3297 build 20251024 and later\nQuTS hero h5.3.1.3292 build 20251024 and later",
    "published": "2025-12-16T02:25:04.815Z",
    "modified": "2025-12-16T02:25:04.815Z",
    "type": "cve",
    "title": "QTS, QuTS hero",
    "source": "qnap",
    "references": "https://www.qnap.com/en/security-advisory/qsa-25-45",
    "id": "CVE-2025-62848",
    "bulletinFamily": "",
    "cwe": [
        "CWE-476"
    ],
    "cvelist": null,
    "sourceData": "QNAP Systems Inc. QTS 5.2.x\nQNAP Systems Inc. QuTS hero h5.2.x\nQNAP Systems Inc. QuTS hero h5.3.x",
    "sourceHref": "",
    "cvss": {
        "score": 8.1,
        "severity": "HIGH",
        "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U",
        "version": "4.0"
    },
    "cvss2": [],
    "cvss3": {
        "version": "",
        "vectorString": "",
        "baseScore": 0,
        "baseSeverity": "",
        "attackVector": "",
        "attackComplexity": "",
        "privilegesRequired": "",
        "userInteraction": "",
        "scope": "",
        "confidentialityImpact": "",
        "integrityImpact": "",
        "availabilityImpact": "",
        "cvssV3": {
            "version": "",
            "vectorString": "",
            "baseScore": 0,
            "baseSeverity": "",
            "attackVector": "",
            "attackComplexity": "",
            "privilegesRequired": "",
            "userInteraction": "",
            "scope": "",
            "confidentialityImpact": "",
            "integrityImpact": "",
            "availabilityImpact": ""
        }
    },
    "href": "",
    "category_name": "CVE",
    "post_link": "",
    "product": "QTS",
    "version": "5.2.x",
    "vendor": "QNAP Systems Inc.",
    "ai_description": "",
    "ai_severity": "",
    "ai_vendor": "",
    "ai_product": "",
    "ai_version": "",
    "ai_score": 0
}