Qsync Central NULL Pointer Dereference Vulnerability Leading to Denial-of-Service

A NULL pointer dereference vulnerability has been identified in Qsync Central versions 4.x. This vulnerability allows remote attackers with user account access to cause a denial-of-service (DoS) condition by exploiting the NULL pointer dereference.

Impact

Exploitation of this vulnerability leads to a denial-of-service condition, causing the application to become unresponsive or unavailable.

Remediation

Users are advised to update Qsync Central to version 5.0.0.1 or later. Instructions for updating Qsync Central are available on the QNAP website.