Tag Archives: QNAP

Critical vulnerability CVE-2024-21899 allows QNAP NAS access without authentication

[German]Owners of QNAP NAS drives are at risk from the critical vulnerability CVE-2024-21899. This allows access to devices without requiring authentication via username and password. The manufacturer has released security updates to its vulnerable operating systems to close the vulnerability. … Continue reading

Posted in devices, Security, Software, Update | Tagged , , , | Leave a comment

Advertising

QNAP warns of vulnerabilities CVE-2023-23368, CVE-2023-23369 in QTS

[German]Catching up from last week – the NAS manufacturer QNAP has published a security warning for its QTS operating system for NAS stations. The critical vulnerability CVE-2023-23368 (CVSS Index 9.8) allows remote execution of commands in older QTS versions. Another … Continue reading

Posted in devices, Security, Software, Update | Tagged , | Leave a comment

How to find weak passwords in Active Directory and eliminate them with PowerShell

[Sponsored Post]Weak or compromised passwords are a known gateway for attackers. If you are able to identify which users in Active Directory (AD) are threatened by this, then PowerShell can help to remedy it. However, PowerShell scripts cannot eliminate basic AD deficits, other tools are needed for this. More ...

QNAP QTS update closes vulnerabilities (March 29, 2023)

[German]As of March 29, 2023, manufacturer QNAP has published a security advisory for its QTS operating system. With an update of the QTS software, the manufacturer closes the vulnerabilities CVE-2022-3437, CVE-2022-3592, CVE-2022-27597, CVE-2022-27598, CVE-2022-42898, CVE-2023-22809. Here is a brief overview … Continue reading

Posted in devices, Security, Software, Update | Tagged , , | Leave a comment

Advertising

QNAP warns about vulnerability CVE-2022-27596 in QTS 5.0.1 and QuTS hero h5.0.1

[German]NAS manufacturer QNAP has issued a security warning for its QNAP products. There is a critical vulnerability CVE-2022-27596 in the QTS 5.0.1 and QuTS hero h5.0.1 software that allows malicious code injection into the firmware. The critical vulnerability has been … Continue reading

Posted in Security, Software | Tagged , | Leave a comment

QNAP investigates AgeLocker ransomware attacks (04/29/2021)

[German]Just recently, QNAP NAS drives were encrypted by a ransomware attack – I went into this topic in the blog post The The QNAP disaster: Ransomware attack on NAS devices. Now the next attack is due. The vendor has again … Continue reading

Posted in devices, Security | Tagged , , | Leave a comment

Advertising

AgeLocker Ransomware attacks QNAP NAS drives

[German]A brief warning for users who have QNAP NAS drives in use. The AgeLocker ransomware seems to target such drives that are accessible via the Internet and encrypts their contents. In some cases, files are also taken off for further … Continue reading

Posted in devices, Security, Software | Tagged , , , | 2 Comments

QNAP Security Advisory about eCh0raix Ransomware

[German]NAS manufacturer QNAP has now issued a security warning because its devices are under attack by the eCh0raix ransomware. Advertising

Posted in devices, Security | Tagged , , , | Leave a comment

QNAP fixes critical NAS bug that may causes data loss

[German]Vendor QNAP has fixed a critical bug in its firmware for NAS drives, that may causes data loss in several RAID configurations. Advertising

Posted in devices, Update | Tagged , , , | 1 Comment