QNAP VioStor Improper Authentication Vulnerability Allowing Remote System Compromise

An improper authentication vulnerability has been identified in QNAP VioStor NVR systems running QVR 5.1.x. This vulnerability allows remote attackers to compromise the security of the system. The issue has been resolved in VioStor version 5.1.6 build 20250621 and later.

Impact

Exploitation of this vulnerability can lead to unauthorized access and compromise of the affected system's security.

Remediation

Users are advised to update to VioStor version 5.1.6 build 20250621 or later. Instructions for updating the QVR firmware on legacy VioStor NVR can be found on the QNAP website.