QNAP TS-1279U-RP Turbo NAS Multiple Security Restriction Bypass Vulnerability

QNAP TS-1279U-RP Turbo NAS Multiple Security Restriction Bypass Vulnerability

Release date: 2012-09-04
Updated on: 2012-09-07

Affected Systems:
QNAP TS-1279U-RP
Description:
--------------------------------------------------------------------------------
Bugtraq id: 55389

QNAP TS-1279U-RP Turbo NAS is a high-performance storage solution that can be used as both IP-SAN (iSCSI) and NAS.

QNAP TS-1279U-RP Turbo NAS (firmware version 3.7.3 build 20120801 and other versions) has multiple security vulnerabilities that allow attackers to bypass certain security restrictions and perform unauthorized operations.

<* Source: Andrea Fabrizi (andrea.fabrizi@gmail.com)
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

QNAP
----
Currently, the vendor does not provide patches or upgrade programs. We recommend that users who use the software follow the vendor's homepage to obtain the latest version:

Http://www.qnap.com/