CVE-2024-50395

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

An authorization bypass through user-controlled key vulnerability has been reported to affect Media Streaming add-on. If exploited, the vulnerability could allow local network attackers to gain privilege.

We have already fixed the vulnerability in the following version: Media Streaming add-on 500.1.1.6 ( 2024/08/02 ) and later

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-639

Affected software

No affected versions have been published.

Timeline

Published
Nov 22, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-503968.8A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If exploited,CVE-2024-503978.8A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If exploited,CVE-2024-503987.2A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If exploited,CVE-2024-503997.2A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If exploited,CVE-2024-50407.8There are multiple ways in LCDS LAquis SCADA for an attacker to access locations outside of their own directory.CVE-2024-504007.2A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If exploited,CVE-2024-504017.2A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If exploited,CVE-2024-504027.2A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If exploited,CVE-2024-504037.2A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If exploited,CVE-2024-504048.8A link following vulnerability has been reported to affect Qsync Central. If exploited, the vulnerability could allow remote attackers who hCVE-2024-504055.5An improper neutralization of CRLF sequences ('CRLF Injection') vulnerability has been reported to affect several QNAP operating system versCVE-2024-504065.4A cross-site scripting (XSS) vulnerability has been reported to affect License Center. If exploited, the vulnerability could allow remote at
CVE-2024-50395: High severity, CVSS 8.8 | Vulnix