Security ID : QSA-25-13

Vulnerability in OpenSSH


  • Release date : June 7, 2025

  • CVE identifier : CVE-2024-6387

  • Affected products: QES 2.2.0

Severity

Important

Status

Resolved


Summary

A vulnerability has been reported in OpenSSH that affects QES.

  

We have already fixed the vulnerability in the following version:

Affected Product Fixed Version
QES 2.2.0 QES 2.2.1 build 20250304 and later

Recommendation

To secure your device, we recommend regularly updating your system to the latest version to benefit from vulnerability fixes. You can check the product support status to see the latest updates available to your NAS model.

Updating QES

  1. Log on to QES as administrator.
  2. Go to Control Panel > System > Firmware Update.
  3. Under Live Update, click Check for Live Update.
    QES downloads and installs the latest available update.

Tip: You can also download the update from the QNAP website. Go to Support > Download Center and then perform a manual update for your specific device.

  

Revision History:
V1.0 (June 07, 2025) - Published

เลือกสเปค

      ดูเพิ่มเติม น้อยลง

      This site in other countries/regions:

      open menu
      back to top