Use NAS Sicherheitslücke with Hackerwettbewerb

Angreifer können one”Kritischen” In HBS 3 Hybrid Backup Sync, Qnap Admin-Rechte is ensured to be compatible with the NAS Device.

Anzeige

hintergrund

The backup software was developed at Hackerwettbewerb Pwn2Own Ireland 2024 with a powerful hacking method. Best of Trend Micro?Battle die Basis des Angriffs ein Command-Injection-Bug (CVE-2024-50388). This was done for a sum of US$10,000.

Some details are very important so that the details can also be elaborated. Wie aus einer Warnmeldung hervorgehtHersteller needs a quick reorganization and Lücke geschlossen.

Sicherheitsupdate verfügbar

Qnap-NAS has an application in App Center and the new version is being attacked. HBS 3 Hybrid Backup Sync 25.1.1.673 installation request

(des)