Medium severity6.0NVD Advisory· Published Nov 22, 2024· Updated Jun 17, 2026
CVE-2024-38646
CVE-2024-38646
Description
An incorrect permission assignment for critical resource vulnerability has been reported to affect Notes Station 3. If exploited, the vulnerability could allow local authenticated attackers who have gained administrator access to read or modify the resource.
We have already fixed the vulnerability in the following version: Notes Station 3 3.9.7 and later
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- QNAP Systems Inc./Notes Station 3v5Range: 3.9.x
before 3.9.7+ 1 more
- (no CPE)range: before 3.9.7
- cpe:2.3:a:qnap:notes_station_3:*:*:*:*:*:*:*:*range: >=3.9.0,<3.9.7
Patches
Vulnerability mechanics
References
1- www.qnap.com/en/security-advisory/qsa-24-36nvdVendor Advisory
News mentions
0No linked articles in our index yet.