QNAP QTS 4.2.x XSS / Command Injection / Transport Issues
Posted by deepcore on February 18, 2017 – 8:03 pm
QNAP QTS firmware contain missing transport layer security, improper certificate validation, command injection, cross site scripting, and information disclosure vulnerabilities that can be exploited to gain remote command execution to the devices or to perform arbitrary administrative functions, and to gain unauthorized access to user’s myQNAPcloud credentials.
Post a reply
You must be logged in to post a comment.