QNAP QuRouter 安全缺陷漏洞 可致远程代码执行

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://www.qnap.com/en/security-advisory/qsa-25-07
• https://www.hkcert.org/tc/security-bulletin/qnap-nas-multiple-vulnerabilities_20241125
• https://www.nics.nat.gov.tw/core_business/information_security_information_sharing/Vulnerability_Alert_Announcements/d2e5b921-c917-47d4-bb55-26627549ba0e/
• https://www.govcert.gov.hk/tc/alerts_detail.php?id=1801
• https://www.qnap.com/en/security-advisory/qsa-24-44
• https://olis.kmu.edu.tw/index.php/zh-tw/information-services/email-service/lot-email-notification/79-notice/security/2814-twcert20211001
• https://netc.shcmusic.edu.cn/2023/1218/c1811a49888/pagem.htm
• https://www.venustech.com.cn/new_type/aqtg/20220507/23827.html
• https://www.anquanke.com/post/id/205949
• https://www.qnap.com/en/security-advisory/qsa-25-25
• https://blog.netlab.360.com/in-the-wild-qnap-nas-attacks/
• https://www.informationsecurity.com.tw/article/article_detail.aspx?aid=11412
• https://zhuanlan.zhihu.com/p/647440407
• https://www.ithome.com.tw/news/174643
• https://www.qnap.com.cn/static/landing/2021/qlocker/response/zh-tw/
• https://www.qnap.com/en/security-advisory/qsa-25-15
• https://www.nsfocus.net/vulndb/116142
• https://www.veritas.com/support/zh_CN/security/VTS21-003
• https://juejin.cn/post/7075883484991979550
• https://www.sentinelone.com/vulnerability-database/cve-2024-50389/
• https://www.qnap.com/en-us/security-advisory/qsa-25-25
• https://app.opencve.io/cve/?vendor=qnap_systems
• https://www.hkcert.org/security-bulletin/qnap-nas-remote-code-execution-vulnerability_20210112
• https://www.facebook.com/groups/sniamalaysia/posts/10164734127063289/
• https://www.qnap.com/en-us/security-advisory/qsa-25-01
• https://www.reddit.com/r/qnap/comments/1cu2ni0/not_again_security_drama/
• https://beyondmachines.net/event_details/qnap-fixes-critical-flaws-in-multiple-products-r-n-c-i-h