QNAP Releases Firmware Patches for 9 New Flaws Affecting NAS Devices

QNAP, Taiwanese maker of network-attached storage NAS devices, on Friday released security updates to patch nine security weaknesses, including a critical issue that could be exploited to take over an affected system. "A vulnerability has been reported to affect QNAP VS Series NVR running QVR,"...

CVE-2021-44056

Affected software: QNAP Video Station (NAS). The CVE-2021-44056 entry describes an improper authentication vulnerability that can lead to system compromise. Root cause is improper authentication in Video Station; exploitation could allow attackers to gain unauthorized control or access sensitive ...

CVE-2021-44056 Improper authentication in Video Station

An improper authentication vulnerability has been reported to affect QNAP device running Video Station. If exploited, this vulnerability allows attackers to compromise the security of the system. We have already fixed this vulnerability in the following versions of Video Station: Video Station...