APP: QNAP HBS 3 Hybrid Backup Sync Command Injection
This signature detects attempts to exploit a known vulnerability against QNAP. A successful attack can lead to command injection and arbitrary code execution.
Extended Description
An OS command injection vulnerability has been reported to affect HBS 3 Hybrid Backup Sync. If exploited, the vulnerability could allow remote attackers to execute commands. We have already fixed the vulnerability in the following version: HBS 3 Hybrid Backup Sync 25.1.1.673 and later
Short Name
APP:MISC:QNAP-HBS-CMD-INJ
Severity
Major
Recommended
False
Recommended Action
Drop
Category
APP
Keywords
3 Backup CVE-2024-50388 Command HBS Hybrid Injection QNAP Sync
Release Date
02/18/2025
Supported Platforms
srx-branch-19.3
vsrx3bsd-19.2
srx-19.4
vsrx3bsd-19.4
srx-branch-19.4
vsrx-19.4
vsrx-19.2
srx-19.3
Sigpack Version
3783
False Positive
Unknown