The vulnerability of the myupnpmediasvr process allows a hacker to write arbitrary files or execute arbitrary commands on QNAP’s operating systems and network storage devices.

The vulnerability of the myupnpmediasvr process, which operates as a DLNA server for QTS operating systems and QNAP network storage devices, is related to insufficient protection of service data during UPNP requests. Exploiting this vulnerability allows a malicious actor to write arbitrary files ...

PT-2020-5927

Name of the Vulnerable Software and Affected Versions: QNAP QTS affected versions not specified Description: The issue is related to the implementation of the myupnpmediasvr DLNA server process in QNAP QTS operating systems for network storage devices. It involves insufficient protection of servi...