QNAP Works on Patches for OpenSSL Bugs Affecting NAS Devices

Share post:

Network-attached storage (NAS) maker QNAP is working on security updates to patch remote code execution and denial-of-service (DoS) vulnerabilities.

The security vulnerabilities traced as CVE-2021-3711 and CVE-2021-3712 affect QNAP NAS devices running QTS, QuTS hero, QuTScloud and HBS 3 Hybrid Backup Sync as backup and disaster recovery apps.

The heap-based buffer overflow in the SM2 cryptographic algorithm behind CVE-2021-3711 might potentially lead to crashes and the execution of arbitrary code by threat actors.

The CVE-2021-3712 vulnerability is caused by a read buffer overrun weakness while processing ASN.1 strings, which could be exploited by hackers to crash vulnerable apps or gain entry to private memory contents such as private keys or similar sensitive information.

As QNAP explains, the vulnerabilities allow remote attackers, if successfully exploited, to obtain unauthorized access to memory data, trigger DoS states, or execute arbitrary code with the privileges of the user running the HBS 3 app.

For more information, view the original story from Bleeping Computer.

Featured Tech Jobs


Related articles

Cyber Security Today, Week in Review for week ending Friday, Feb. 23, 2024

This episode features discussion on the takedown of the LockBit ransomware gang

Breaking news: RCMP facing ‘alarming’ cyber attack

The RCMP is facing a serious cyber attack from an unspecified threat actor. The Mounties told CBC News today that a “breach of this magnitude is alarming.” “The situation is evolving quickly but at this time, there is no impact on RCMP operations and no known threat to the safety and security of Canadians,” a spokesperson

Leaked documents may show the inside of China’s hacking strategy

Documents apparently stolen by disgruntled employees to embarrass their firm may give insight into China's cyber

Become a member

New, Relevant Tech Stories. Our article selection is done by industry professionals. Our writers summarize them to give you the key takeaways