QNAP Patches Critical RCE Security Vulnerabilities In NAS devices

QNAP Patches Critical RCE Security Vulnerabilities in NAS devices

QNAP Systems has patched a pair of critical security flaws that could enable unauthenticated attackers to take control of its NAS computers.

According to a blog post published on March 31 by security researcher Yaniv Puyeski of SAM Seamless Network, the vulnerabilities, which were among a slew of serious bugs addressed by the Taiwanese hardware vendor last week, can both lead to remote code execution (RCE).

QNAP NAS products are used for file sharing, virtualization, storage management, and surveillance applications and are sold by subsidiaries in 28 countries.

To Read More: portswigger