QNAP QuNetSwitch Hard-Coded Credentials Vulnerability Allowing Unauthorized Access

A vulnerability in QuNetSwitch versions 2.0.x has been identified, involving hard-coded credentials that remote attackers can exploit to gain unauthorized access. This vulnerability has been resolved in QuNetSwitch version 2.0.5.0906 and later.

Impact

Exploitation of this vulnerability allows for unauthorized access to the affected system.

Remediation

Users can update QuNetSwitch through the QTS or QuTS hero App Center. For ADRA NDR users, the latest firmware can be downloaded from the QNAP Download Center or via the Firmware > Manual Update option in the ADRA NDR interface.