Anyone with a QNAP Nas be aware!

[MJCM]

Local Privilege Escalation Vulnerability in Linux (Dirty Pipe)

https://www.qnap.com/en/security-advisory/QSA-22-05

 

•  

Quote

 

• Affected products: All QNAP x86-based NAS and some QNAP ARM-based NAS running QTS 5.0.x and QuTS hero h5.0.x
• Not affected products: QNAP NAS running QTS 4.x

 

Recommendation

Currently there is no mitigation available for this vulnerability. We recommend users to check back and install security updates as soon as they become available.

 

A security issue that I warned for in the Linux Sub forum, is now entering the NAS Stage