CVE-2018-14748: High severity qnap qts vulnerability
Improper Authorization vulnerability in QTS 4.3.5 build 20181013, QTS 4.3.4 build 20181008, QTS 4.3.3 build 20180829, QTS 4.2.6 build 20180829 and earlier versions could allow remote attackers to power off the NAS.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-14748?
CVE-2018-14748 is classified as a medium severity vulnerability due to the potential for remote attackers to power off affected NAS systems.
How do I fix CVE-2018-14748?
To mitigate CVE-2018-14748, users should update their QTS operating system to a version that is not affected, specifically QTS versions released after the vulnerability was disclosed.
Which QNAP QTS versions are affected by CVE-2018-14748?
CVE-2018-14748 affects QTS versions 4.2.6, 4.3.3, 4.3.4, and 4.3.5.
Can CVE-2018-14748 allow data loss?
While CVE-2018-14748 allows the power-off of the NAS, it primarily poses a risk of downtime rather than data loss, depending on the circumstances.
What steps can I take to secure my NAS against CVE-2018-14748?
Securing your NAS against CVE-2018-14748 involves updating to the latest QTS version and implementing strict access controls.