CVE:CVE-2021-28798
CNNVD:CNNVD-202105-1352
QNAP NAS 存在安全漏洞，该漏洞源于一个相对路径遍历漏洞，这个漏洞允许攻击者可利用该漏洞修改影响系统完整性的文件。QNAP已经在以下版本中修复了此漏洞:QTS 4.5.2.1630 Build 20210406 and later QTS 4.3.6.1663 Build 20210504 and later QTS 4.3.3.1624 Build 20210416 and later QuTS hero h4.5.2.1638 Build 20210414 and later QTS NAS。
solution:Upgrade qnap qts to a higher version than 4.3.3.1624,4.3.6.1663,4.5.2.1630,and avoid the version [4.3.2.0144,4.3.3.1624),[4.3.4.0000,4.3.6.1663),[4.4.0000,4.5.2.1630); Upgrade qnap quts_hero to a higher version than h4.5.2.1638,and avoid the version (,h4.5.2.1638)