PT-2026-48358
CVE-2025-62850
·
Published
2026-06-10
·
Updated
2026-10-15
Description by
CVSS 4.0
1.2
LowMetricsAV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Name of the Vulnerable Software and Affected Versions
QuTS hero versions prior to h5.2.9.3410 build 20260214
QuTS hero versions prior to h5.3.4.3500 build 20260520
QuTS hero versions prior to h6.0.0.3459 build 20260409
Description
A NULL pointer dereference occurs when a program attempts to read or write to a memory address that is NULL, typically leading to a system crash. A remote attacker with administrator account privileges can exploit this issue to launch a denial-of-service (DoS) attack, which renders the system unavailable to users.
Recommendations
Update to version h5.2.9.3410 build 20260214 or later.
Update to version h5.3.4.3500 build 20260520 or later.
Update to version h6.0.0.3459 build 20260409 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾