What is the CVSS score of CVE-2025-22481?

CVE-2025-22481 has a CVSS 3.1 base score of 8.8 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.2%.

Which versions of Qts are affected by CVE-2025-22481?

CVE-2025-22481 is a command injection vulnerability in QNAP NAS systems (QTS and QuTS hero) that enables authenticated users to execute arbitrary commands, posing a significant risk to organizations…. A patch is available.

How to fix or mitigate CVE-2025-22481?

Within 24 hours: Identify all QNAP NAS devices running QTS or QuTS hero in your environment and document current firmware versions. Within 7 days: Apply vendor-released patches to all affected systems and reset credentials for all NAS user accounts as a precautionary measure. Within 30 days: Implement network segmentation to restrict NAS administrative access to specific authorized IP ranges and enable audit logging for all NAS account activities.

Qts CVE-2025-22481

EUVD-2025-17340 HIGH

Command Injection (CWE-77)

2025-06-06 security@qnapsecurity.com.tw

Qnap Command Injection RCE Qts Quts Hero

8.8

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

8.8 HIGH

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Updated

Apr 16, 2026 - 06:45 EUVD-patch-fix

executive_summary

Re-analysis Queued

Apr 16, 2026 - 05:29 backfill_euvd_patch

patch_released

Patch available

Apr 16, 2026 - 05:29 EUVD

5.2.4.3079

EUVD ID Assigned

Mar 14, 2026 - 18:10 euvd

EUVD-2025-17340

Analysis Generated

Mar 14, 2026 - 18:10 vuln.today

CVE Published

Jun 06, 2025 - 16:15 nvd

HIGH 8.8

DescriptionCVE.org

A command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained user access to execute arbitrary commands.

We have already fixed the vulnerability in the following versions: QTS 5.2.4.3079 build 20250321 and later QuTS hero h5.2.4.3079 build 20250321 and later

AnalysisAI

Command injection vulnerability affecting QNAP NAS operating systems (QTS and QuTS hero) that allows authenticated remote attackers to execute arbitrary commands with high severity (CVSS 8.8). The vulnerability requires valid user credentials but no user interaction, making it exploitable by compromised accounts or insider threats. QNAP has released patches as of March 21, 2025, and exploitation details are limited in public disclosures at this time.

Technical ContextAI

This vulnerability is classified as CWE-77 (Improper Neutralization of Special Elements used in a Command - Command Injection), indicating that user-supplied input is insufficiently sanitized before being passed to system command execution functions. QNAP NAS systems run proprietary QTS (QNAP Turbo Station) or QuTS hero operating systems that manage network-attached storage and provide remote administration interfaces. The command injection likely occurs in a network-accessible service or administrative function that accepts user input—potentially in web interface parameters, API calls, or configuration management features—and passes this input to shell execution without proper escaping or validation. The affected products are enterprise-grade NAS systems commonly deployed in business, research, and content delivery environments.

RemediationAI

action: Immediate patching; details: Upgrade QTS to version 5.2.4.3079 build 20250321 or later; upgrade QuTS hero to version h5.2.4.3079 build 20250321 or later. Check QNAP's official security advisory and download center for your specific NAS model to obtain the correct firmware image.
action: Access control hardening; details: Until patching is complete, restrict administrative and user access to QNAP NAS web interfaces and APIs. Disable remote access if not required; use VPN or IP whitelisting to limit access to trusted networks only.
action: Credential management; details: Enforce strong, unique passwords for all NAS user accounts. Disable or audit any shared administrative credentials. Implement multi-factor authentication if supported by your QNAP firmware version.
action: Network monitoring; details: Monitor NAS system logs and network traffic for suspicious command patterns or unexpected administrative activity. Alert on failed authentication attempts to NAS management interfaces.
action: Vulnerability tracking; details: Register affected QNAP devices with QNAP's security notification service and monitor CVE databases for any proof-of-concept or active exploitation reports.