QNAP Qsync Central Resource Exhaustion Vulnerability

A vulnerability allowing resource exhaustion without limits or throttling has been identified in QNAP Qsync Central versions 4.x. This issue arises when a remote attacker with a user account exploits the vulnerability, causing a denial-of-service effect by preventing other systems, applications, or processes from accessing the same type of resource.

Impact

Exploitation of this vulnerability leads to resource exhaustion, causing a denial-of-service effect by blocking other systems, applications, or processes from accessing the same type of resource.

Remediation

Users are advised to update Qsync Central to version 5.0.0.1 or later. Instructions for updating Qsync Central are available on the QNAP website.