QNAP fixes critical bugs in QVR video surveillance solution

guest · Sep 27, 2021

QNAP fixes critical bugs in QVR video surveillance solution
September 27, 2021
https://www.bleepingcomputer.com/ne...ical-bugs-in-qvr-video-surveillance-solution/

Network-attached storage (NAS) maker QNAP has patched its QVR video management system against two critical-severity issues that could be exploited to run arbitrary commands.

QNAP promotes its QVR software as a professional solution that allows real-time video monitoring, recording, playback, and alarm notifications when coupled with supported IP cameras.
Click to expand...

Total of three security issues
QNAP announced today that it fixed three command injection vulnerabilities in the QVR software for managing video surveillance, two of them receiving a critical severity score of 9.8 out of 10.

Apart from these two security issues, QNAP fixed another one tracked as CVE-2021-34349. It is from the same class but with a lower severity score, 7.2 out of 10.
Click to expand...

“Two command injection vulnerabilities have been reported to affect certain QNAP EOL devices running QVR. If exploited, these vulnerabilities allow remote attackers to run arbitrary commands” - QNAP
It is unclear if any of the bugs are being exploited been exploited.
Click to expand...

Log in or Sign up

QNAP fixes critical bugs in QVR video surveillance solution

guest Guest

Log in or Sign up

QNAP fixes critical bugs in QVR video surveillance solution

guest Guest

Useful Searches