QNAP QuRouter Command Injection Vulnerability

A command injection vulnerability exists in QNAP QuRouter versions 2.5.1.060 and later. If a remote attacker gains access to an administrator account, they can exploit this vulnerability to execute arbitrary commands on the device.

Impact

Exploitation of this vulnerability allows for arbitrary command execution on the affected device.

Remediation

Users can update QuRouter to version 2.5.1.060 or later to address this vulnerability. Instructions for updating QuRouter are available on the QNAP website.