Name of the Vulnerable Software and Affected Versions: QNAP QTS (affected versions not specified)

Description: The issue is related to the implementation of the myupnpmediasvr DLNA server process in QNAP QTS operating systems for network storage devices. It involves insufficient protection of service data when processing UPNP requests. This could allow a remote attacker to write arbitrary files or execute arbitrary commands by connecting through port 8200.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.