8.1High
CVE-2025-59389Hyper Data Protector
Description
An SQL injection vulnerability has been reported to affect Hyper Data Protector. The remote attackers can then exploit the vulnerability to execute unauthorized code or commands. We have already fixed the vulnerability in the following versions: Hyper Data Protector 2.2.4.1 and later
Weakness (CWE):
CWE-89
Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.
Affected products and versions
| Vendor | Product | Versions | |
|---|---|---|---|
| QNAP Systems Inc. | Hyper Data Protector | 2.2.x – < 2.2.4.1 |
References and patches
- https://www.qnap.com/en/security-advisory/qsa-25-48 Vendor Advisory
CPE matches (NVD) (2)
cpe:2.3:a:qnap:hyper_data_protector:*:*:*:*:*:*:*:*≥ 2.1.0.0226 < 2.2.4.1cpe:2.3:a:qnap:hyper_data_protector:2.0.0.1115:beta:*:*:*:*:*:*