QNAP Updates
1662Warning Date
Severity Level
Warning Number
Target Sector
31 December, 2020
● High
2020-2261
All
Description:
QNAP has released security updates to address several vulnerabilities in the following products:
- QTS 4.3.6.0895 build 20190328 (and later)
- QTS 4.3.4.0899 build 20190322 (and later)
- QTS 4.4.3.1354 build 20200702 (and later)
- QTS 4.5.1.1456 build 20201015 (and later)
- QuTS hero h4.5.1.1472 build 20201031 (and later)
- QuTScloud c4.5.2.1379 build 20200730 (and later)
Threats:
Attacker could exploit these vulnerabilities by doing the following:
- Sensitive information disclosure
- Renaming arbitrary files
Best practice and Recommendations:
The CERT team encourages users to review QNAP security advisory and apply the necessary updates: