Qsync Central Resource Allocation Vulnerability Allowing Denial-of-Service

A vulnerability in Qsync Central versions 4.x has been identified, allowing for resource allocation without limits or throttling. This issue can be exploited by remote attackers who gain access to a user account, enabling them to disrupt the availability of resources, applications, or processes. The vulnerability has been resolved in Qsync Central version 5.0.0.1 and later.

Impact

Exploitation of this vulnerability can lead to a denial-of-service condition, where other systems, applications, or processes are unable to access the same type of resource, causing disruption and potential downtime.

Remediation

Users are advised to update Qsync Central to version 5.0.0.1 or later. Instructions for updating Qsync Central are available on the QNAP website.