QNAP Storage Devices Remote Users Access Vulnerability
Last Update Date:
23 Jan 2017 10:17
Release Date:
23 Jan 2017
3122
Views
RISK: High Risk
TYPE: Servers - Other Servers
A vulnerability was identified in QNAP Storage Devices, a remote user can gain access to the target system.
Impact
- Security Restriction Bypass
System / Technologies affected
- All QNAP NAS running QTS
Solutions
- No solution was available at the time of this vulnerability
Workaround
Users can choose to disable automatic updates and avoid clicking the "Check for Update" button on the Live Update tab. Instead, QNAP recommends performing a manual update instead from the Firmware Update tab.
Disabling Live Update
- Log on as administrator to the QTS web console.
- Go to "Control Panel" > "Firmware Update" > "Live Update".
- Deselect "Automatically check if a newer version is available when logging into the NAS web administration interface".
- Click "Apply".
Vulnerability Identifier
- No CVE information is available
Source
Related Link
Share with