QNAP Download Station Relative Path Traversal Vulnerability

A relative path traversal vulnerability exists in QNAP Download Station versions 5.10.x. If a remote attacker gains access to an administrator account, they can exploit this vulnerability to read unintended files or system data.

Impact

Exploitation allows for unauthorized reading of files or system data, potentially leading to further attacks or information disclosure.

Remediation

Users can update Download Station to version 5.10.0.305 (for QTS 5.2.1) or version 5.10.0.304 (for QuTS hero h5.2.1). Instructions for updating Download Station are available on the QNAP website.