QNAP Fixes Critical Flaws Impacting NAS Devices

QNAP Systems, which makes network-attached storage (NAS) appliances used for file sharing and storage management, has issued a critical advisory fixing three vulnerabilities in several products used for its NAS devices.

The most severe flaw in the security advisory is an improper authentication bug (CVE-2024-21899) allowing users to compromise the security of the system via a network. Further details about this flaw are not available, but according to NIST's National Vulnerability Database it has a CVSS score of 9.8. QNAP …

advisory authentication bug compromise critical cve devices file file sharing fixes flaw flaws management nas network network-attached storage products qnap security security advisory sharing storage systems vulnerabilities