QNAP Update
2747Warning Date
Severity Level
Warning Number
Target Sector
8 June, 2020
● High
2020-1326
All
Description:
QNAP has released a security update to address multiple vulnerabilities in the following versions:
- All QNAP NAS
Threats:
An attacker could exploit these vulnerabilities by doing the following:
- Command Injection -remotely.
- Cross-site scripting (XSS) -remotely.
Best practice and Recommendations:
The CERT team encourages users to review QNAP security advisory and apply the necessary update: