CVE-2025-52872: quts hero h5.2.0.2737 · update build_20240417, h5.2.0.2782 · update build_20240601, h5.2.0.2789 · update…

Affected technology

quts hero · h5.2.0.2737 · update build_20240417
qnap

quts hero · h5.2.0.2782 · update build_20240601
qnap

quts hero · h5.2.0.2789 · update build_20240607
qnap

quts hero · h5.2.0.2802 · update build_20240620
qnap

quts hero · h5.2.0.2823 · update build_20240711
qnap

quts hero · h5.2.0.2851 · update build_20240808
qnap

quts hero · h5.2.0.2860 · update build_20240817
qnap

quts hero · h5.2.1.2929 · update build_20241025
qnap

quts hero · h5.2.1.2940 · update build_20241105
qnap

quts hero · h5.2.2.2952 · update build_20241116
qnap

quts hero · h5.2.3.3006 · update build_20250108
qnap

quts hero · h5.2.4.3070 · update build_20250312
qnap

quts hero · h5.2.4.3079 · update build_20250321
qnap

quts hero · h5.2.5.3138 · update build_20250519
qnap

quts hero · h5.2.6.3195 · update build_20250715
qnap

quts hero · h5.3.0.3115 · update build_20250430
qnap

quts hero · h5.3.0.3145 · update build_20250530
qnap

quts hero · h5.3.0.3192 · update build_20250716
qnap

qts · 5.2.0.2737 · update build_20240417
qnap

qts · 5.2.0.2744 · update build_20240424
qnap

qts · 5.2.0.2782 · update build_20240601
qnap

qts · 5.2.0.2802 · update build_20240620
qnap

qts · 5.2.0.2823 · update build_20240711
qnap

qts · 5.2.0.2851 · update build_20240808
qnap

qts · 5.2.0.2860 · update build_20240817
qnap

qts · 5.2.1.2930 · update build_20241025
qnap

qts · 5.2.2.2950 · update build_20241114
qnap

qts · 5.2.3.3006 · update build_20250108
qnap

qts · 5.2.4.3070 · update build_20250312
qnap

qts · 5.2.4.3079 · update build_20250321
qnap

qts · 5.2.4.3092 · update build_20250403
qnap

qts · 5.2.5.3145 · update build_20250526
qnap

qts · 5.2.6.3195 · update build_20250715
qnap

qts · 5.2.6.3229 · update build_20250818
qnap

QTS · 5.2.x to before 5.2.7.3256 build 20250913
QNAP Systems Inc.

QuTS hero · h5.2.x to before h5.2.7.3256 build 20250913, h5.3.x to before h5.3.0.3192 build 20250716
QNAP Systems Inc.

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 4.0): Network (remote) · Low privileges required · No user interaction required

What an attacker can do

Vendor/CNA’s CVSS 4.0 assessment (base score 1.3/10) rates confidentiality, integrity and availability impact as low. The description does not specify what an attacker can achieve beyond these rated impacts.