QNAP NAS Multiple Vulnerabilities
Release Date: 9 Sep 2024
RISK: Medium Risk
TYPE: Servers - Other Servers
Multiple vulnerabilities were identified in QNAP NAS. A remote attacker could exploit some of these vulnerabilities to trigger remote code execution, security restriction bypass, sensitive information disclosure and elevation of privilege on the targeted system.
Impact
- Remote Code Execution
- Security Restriction Bypass
- Information Disclosure
- Elevation of Privilege
System / Technologies affected
- QTS 4.5.x
- QuTS hero h4.5.x
- QTS 5.1.x
- QuTS hero h5.1.x
Solutions
Before installation of the software, please visit the vendor web-site for more details.
Apply fixes issued by the vendor:
- https://www.qnap.com/en/security-advisory/qsa-24-28
- https://www.qnap.com/en/security-advisory/qsa-24-32
- https://www.qnap.com/en/security-advisory/qsa-24-33
沒有留言:
發佈留言