Qsync Central Resource Exhaustion Vulnerability

A vulnerability allowing allocation of resources without limits or throttling has been reported in Qsync Central versions 4.x. This issue can be exploited by remote attackers who gain access to a user account, allowing them to disrupt resource availability for other systems, applications, or processes.

Impact

Exploitation of this vulnerability can lead to resource exhaustion, causing disruptions in service by preventing other systems or processes from accessing necessary resources.

Remediation

Users are advised to update Qsync Central to version 5.0.0.1 or later. Instructions for updating Qsync Central are available on the QNAP website.