An OS command injection vulnerability that could lead to arbitrary code execution has been patched

Summary

An OS command injection vulnerability that could lead to arbitrary code execution has been patched

Affected platforms

The following platforms are known to be affected:

Threat details

Introduction

QNAP has released a security update that addresses an OS command injection vulnerability affecting HBS 3 Hybrid Backup Sync. HBS 3 Hybrid Backup Sync is a backup and disaster recovery solution for local, remote server, and cloud storage services. If exploited, CVE-2024-50388 could allow a remote attacker to execute arbitrary commands.

Remediation advice

Affected organisations are encouraged to review QNAP security advisory QSA-24-41 and apply the relevant updates.   

Definitive source of threat updates

CVE Vulnerabilities

Last edited: 1 November 2024 11:02 am