QNAP QuRouter Improper Neutralization of Control Sequences Vulnerability

A vulnerability allowing improper neutralization of escape, meta, or control sequences has been identified in QNAP QuRouter versions 2.6.x. This vulnerability can be exploited by local attackers with administrator privileges to cause unexpected behavior in the application.

Impact

Exploitation of this vulnerability can lead to unexpected behavior in the application, potentially allowing for further exploitation or manipulation of the system.

Remediation

Users can update to QuRouter version 2.6.3.009 or later to address this vulnerability. Instructions for updating QuRouter are available on the QNAP website.