Enio Pena Navarro

The issue is related to an improper link resolution before file access, which can be exploited by a remote attacker to traverse the file system to unintended locations and read or overwrite the contents of unexpected files, thus affecting the confidentiality and integrity of information.

A command injection issue affects QNAP NAS running QuTScloud, QuTS hero, and QTS, allowing remote attackers to execute arbitrary commands. This issue is related to the operating system's failure to neutralize special elements used in OS commands, which can be exploited by remote attackers to impact the confidentiality, integrity, and availability of information.

An open redirect issue affects QNAP devices running QuTScloud, QuTS hero, and QTS, allowing attackers to redirect users to untrusted pages containing malware. This could impact the confidentiality and integrity of information.