QNAP NetBak Replicator Unquoted Search Path Vulnerability Allowing Code Execution

A vulnerability in QNAP NetBak Replicator versions 4.5.x has been identified, involving an unquoted search path or element. This vulnerability allows local attackers with user accounts to execute unauthorized code or commands. The issue has been resolved in NetBak Replicator version 4.5.15.0807 and later.

Impact

Exploitation of this vulnerability could lead to unauthorized code execution on the affected system.

Remediation

Users are advised to update to NetBak Replicator version 4.5.15.0807 or later. For the latest updates available for QNAP utilities, visit the QNAP Utilities page.