Security restrictions bypass in QNAP QTS - #VU48238
Published: November 10, 2020
Vulnerability identifier: #VU48238
CSH Severity: Medium
CVSS v4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N]
CVE-ID: N/A
CWE-ID: CWE-264
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerabilities allow a remote attacker to bypass implemented security restrictions.
Multiple unspecified vulnerabilities have been identified and fixed in Surveillance Station, QVPN Service, Qfiling, Qsync Central, QcalAgent, and IFTTT Agent applications.
Affected software
QNAP QTS
Remediation
Install updates from vendor's website.
QNAP QTS - update to 4.5.1.1480 20201108