CVE-2025-52429: qts 5.2.0.2737 · update build_20240417, 5.2.0.2744 · update build_20240424, 5.2.0.2782 · update build_20240601 (+11…

Affected technology

qts · 5.2.0.2737 · update build_20240417
qnap

qts · 5.2.0.2744 · update build_20240424
qnap

qts · 5.2.0.2782 · update build_20240601
qnap

qts · 5.2.0.2802 · update build_20240620
qnap

qts · 5.2.0.2823 · update build_20240711
qnap

qts · 5.2.0.2851 · update build_20240808
qnap

qts · 5.2.0.2860 · update build_20240817
qnap

qts · 5.2.1.2930 · update build_20241025
qnap

qts · 5.2.2.2950 · update build_20241114
qnap

qts · 5.2.3.3006 · update build_20250108
qnap

qts · 5.2.4.3070 · update build_20250312
qnap

qts · 5.2.4.3079 · update build_20250321
qnap

qts · 5.2.4.3092 · update build_20250403
qnap

qts · 5.2.5.3145 · update build_20250526
qnap

quts hero · h5.2.0.2737 · update build_20240417
qnap

quts hero · h5.2.0.2782 · update build_20240601
qnap

quts hero · h5.2.0.2789 · update build_20240607
qnap

quts hero · h5.2.0.2802 · update build_20240620
qnap

quts hero · h5.2.0.2823 · update build_20240711
qnap

quts hero · h5.2.0.2851 · update build_20240808
qnap

quts hero · h5.2.0.2860 · update build_20240817
qnap

quts hero · h5.2.1.2929 · update build_20241025
qnap

quts hero · h5.2.1.2940 · update build_20241105
qnap

quts hero · h5.2.2.2952 · update build_20241116
qnap

quts hero · h5.2.3.3006 · update build_20250108
qnap

quts hero · h5.2.4.3070 · update build_20250312
qnap

quts hero · h5.2.4.3079 · update build_20250321
qnap

quts hero · h5.2.5.3138 · update build_20250519
qnap

QTS · 5.2.x to before 5.2.6.3195 build 20250715
QNAP Systems Inc.

QuTS hero · h5.2.x to before h5.2.6.3195 build 20250715
QNAP Systems Inc.

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 4.0): Network (remote) · High privileges required · No user interaction required

What an attacker can do

Vendor/CNA’s CVSS 4.0 assessment (base score 5.1/10) rates confidentiality and integrity impact as none; availability impact as low. The description does not specify what an attacker can achieve beyond these rated impacts.