Is itCheck something

Attack list

QNAP NAS

12 attacked bugs

No new QNAP NAS attack bugs lately.

What to do

Open QTS, then Control Panel, then Firmware Update. Install the latest update.

Attackers keep using these against anything that hasn't updated. Updating closes them.

BugConfirmed in attacks

  1. QNAP VioStor NVR bug: OS command injectionCVE-2023-47565Dec 21, 2023
  2. QNAP Photo Station bug: station externally controlled referenceCVE-2022-27593Sep 8, 2022
  3. QNAP Photo Station bug: station path traversalCVE-2019-7195Jun 8, 2022
  4. QNAP Photo Station bug: station path traversalCVE-2019-7194Jun 8, 2022
  5. QNAP QTS bug: improper input validationCVE-2019-7193Jun 8, 2022
  6. QNAP Photo Station bug: station improper access controlCVE-2019-7192Jun 8, 2022
  7. QNAP Network Attached Storage (NAS) bug: nas file station cross-site scriptingCVE-2018-19953May 24, 2022
  8. QNAP Network Attached Storage (NAS) bug: nas file station command injectionCVE-2018-19949May 24, 2022
  9. QNAP Network Attached Storage (NAS) bug: nas file station cross-site scriptingCVE-2018-19943May 24, 2022
  10. QNAP Network-Attached Storage (NAS) bug: (nas) command injectionCVE-2020-2509Apr 11, 2022
  11. QNAP Network Attached Storage (NAS) bug: nas improper authorizationCVE-2021-28799Mar 31, 2022
  12. QNAP Systems Helpdesk bug: helpdesk improper access controlCVE-2020-2506Mar 25, 2022

From the US government's list of bugs confirmed in real attacks (CISA KEV). Check everything you use.