Qnap Updates
2509Warning Date
Severity Level
Warning Number
Target Sector
18 April, 2021
● Critical
2021-2785
All
Description:
QNAP has released security updates to address several vulnerabilities in the following products:
- All QNAP NAS
- QNAP NAS running Multimedia Console or the Media Streaming add-on
- QNAP NAS running Twonky Server
Threats:
An attacker could exploit these vulnerabilities by doing the following:
- Execute arbitrary code
- Cross-site scripting (XSS)
Best practice and Recommendations:
The CERT team encourages users to review QNAP security advisory and apply the necessary updates: