Command injection

A command injection vulnerability has been reported to affect QNAP NAS running QuTScloud, QuTS hero and QTS. If exploited, this vulnerability allows remote attackers to run arbitrary commands. We have already fixed this vulnerability in the following versions of QuTScloud, QuTS hero and QTS:...

CVE-2021-44051 Command injection

A command injection vulnerability has been reported to affect QNAP NAS running QuTScloud, QuTS hero and QTS. If exploited, this vulnerability allows remote attackers to run arbitrary commands. We have already fixed this vulnerability in the following versions of QuTScloud, QuTS hero and QTS:...

CVE-2021-44051

CVE-2021-44051 affects QNAP NAS running QTS, QuTS hero, and QuTScloud (remote command execution via a command-injection flaw). The NVD entry lists CVSS v3.1 base score 8.8 (high) with network access, low attack complexity, and no user interaction required; impact to confidentiality, integrity, an...

Linksys MR9600 Rear Link Vulnerability

Linksys MR9600 is a wireless router from Linksys, Inc. A security vulnerability exists in Linksys MR9600 devices prior to version 2.0.5, which can be exploited by attackers to read arbitrary files via a symbolic link to the root of a NAS SMB share...

CVE-2022-24372

Linksys MR9600 devices before 2.0.5 allow attackers to read arbitrary files via a symbolic link to the root directory of a NAS SMB share...

Design/Logic Flaw

Linksys MR9600 devices before 2.0.5 allow attackers to read arbitrary files via a symbolic link to the root directory of a NAS SMB share...

CVE-2022-24372

CVE-2022-24372 affects Linksys MR9600 devices prior to version 2.0.5. An improper handling of a symbolic link to the root directory of a NAS SMB share allows an attacker to read arbitrary files. The vulnerability is documented with an impact on confidentiality (high) and does not indicate exploit...

CVE-2022-24372

Linksys MR9600 devices before 2.0.5 allow attackers to read arbitrary files via a symbolic link to the root directory of a NAS SMB share...

QNAP Advises Users to Update NAS Firmware to Patch Apache HTTP Vulnerabilities

Network-attached storage NAS appliance maker QNAP on Thursday said it's investigating its lineup for potential impact arising from two security vulnerabilities that were addressed in the Apache HTTP server last month. The critical flaws, tracked as CVE-2022-22721 and CVE-2022-23943, are rated 9.8...

Dell PowerScale OneFS Elevation of Privilege Vulnerability (CNVD-2022-32823)

Dell PowerScale OneFS is a PowerScale OneFS operating system that provides scale-out NAS. Dell PowerScale OneFS has a security vulnerability that could be exploited by an attacker to gain read-only file write access...

Dell PowerScale OneFS Denial of Service Vulnerability (CNVD-2022-32824)

Dell PowerScale OneFS is a PowerScale OneFS operating system that provides scale-out NAS. Dell PowerScale OneFS has a security vulnerability that could be exploited by an attacker to cause a denial of service...

Dell PowerScale OneFS Elevation of Privilege Vulnerability (CNVD-2022-32825)

Dell PowerScale OneFS is a PowerScale OneFS operating system that provides a horizontally scalable NAS. An elevation of privilege vulnerability exists in Dell PowerScale OneFS, which stems from an incorrect programmatic call to a high-level native procedure. A local attacker could exploit this...

Dell PowerScale OneFS Man-in-the-Middle Attack Vulnerability

Dell PowerScale OneFS is a PowerScale OneFS operating system that provides scale-out NAS. Dell PowerScale OneFS has a security vulnerability that can be exploited by remote attackers to cause a man-in-the-middle capture of administrative credentials...

Dell PowerScale OneFS Information Disclosure Vulnerability (CNVD-2022-32833)

Dell PowerScale OneFS is a PowerScale OneFS operating system that provides a horizontally scalable NAS. Dell PowerScale OneFS has a security vulnerability that could be exploited by an attacker to cause an information breach...

Dell PowerScale OneFS Information Disclosure Vulnerability

Dell PowerScale OneFS is a PowerScale OneFS operating system that provides scale-out NAS. Dell PowerScale OneFS has a security vulnerability that could be exploited by an attacker to gain access to sensitive information and use it to launch further attacks on the affected system...

Dell PowerScale OneFS Default Hardcoded Credentials Vulnerability

Dell PowerScale OneFS is a PowerScale OneFS operating system that provides scale-out NAS. Dell PowerScale OneFS has a security vulnerability that could be exploited by a locally authenticated attacker to gain access to the system...

Dell PowerScale OneFS Security Bypass Vulnerability (CNVD-2022-32806)

Dell PowerScale OneFS is the PowerScale OneFS operating system that provides horizontal scaling NAS. Dell PowerScale OneFS has a security vulnerability that can be exploited by an unauthenticated, remote attacker to cause an account compromise...

Dell PowerScale OneFS Security Bypass Vulnerability (CNVD-2022-32804)

Dell PowerScale OneFS is the PowerScale OneFS operating system that provides horizontal scaling NAS. A security vulnerability exists in Dell PowerScale OneFS, which can be exploited by an attacker to not log information that identifies the source of changes to account information...

Dell PowerScale OneFS Elevation of Privilege Vulnerability

Dell PowerScale OneFS is the PowerScale OneFS operating system that provides horizontal scaling NAS. A security vulnerability exists in Dell PowerScale OneFS that originates from a remote file system user with a local account that could be exploited by an attacker to cause escalation of file...

Dell PowerScale OneFS Security Bypass Vulnerability

Dell PowerScale OneFS is the PowerScale OneFS operating system that provides horizontal scaling NAS. A security vulnerability exists in Dell PowerScale OneFS, which can be exploited by a remote unprivileged malicious attacker to cause full access to the system...