ZDI-CAN-13810: QNAP NAS Hybrid Backup Missing Authentication for Critical Function Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of QNAP NAS. Authentication is not required to exploit this vulnerability. The specific flaw exists within the RTSS server, which listens on TCP port 8899 by default. The issue results from the lack of authentication prior to allowing alterations to the system configuration. An attacker can leverage this vulnerability to execute arbitrary code in the context of the Administrator.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| QNAP NAS |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of ZDI-CAN-13810?
ZDI-CAN-13810 is considered a critical vulnerability due to its potential for remote code execution without authentication.
How do I fix ZDI-CAN-13810?
To fix ZDI-CAN-13810, users should update their QNAP NAS devices to the latest firmware version provided by QNAP.
What systems are affected by ZDI-CAN-13810?
ZDI-CAN-13810 affects QNAP NAS devices that have the RTSS server running on TCP port 8899.
Can ZDI-CAN-13810 be exploited remotely?
Yes, ZDI-CAN-13810 can be exploited remotely since it does not require authentication to execute arbitrary code.
What kind of impact can ZDI-CAN-13810 have on users?
The impact of ZDI-CAN-13810 can be severe, allowing attackers to execute arbitrary code and potentially take control of the affected QNAP NAS device.
- agent/references
- agent/softwarecombine
- collector/zdi-advisory
- source/ZDI
- alias/ZDI-21-783
- alias/ZDI-CAN-13810
- alias/CVE-2021-28809
- agent/software-canonical-lookup
- agent/title
- agent/severity
- agent/event
- agent/type
- agent/description
- agent/tags
- agent/source
- vendor/qnap
- canonical/qnap nas