CVE-2017-7641

Name of the Vulnerable Software and Affected Versions QNAP NAS application Media Streaming add-on versions 421.1.0.2, 430.1.2.0, and earlier

Description The issue concerns the lack of CSRF protections in the Media Streaming add-on, which could potentially allow for unauthorized actions.

Recommendations For QNAP NAS application Media Streaming add-on versions 421.1.0.2, 430.1.2.0, and earlier, update to a version that includes CSRF protections to mitigate the risk. At the moment, there is no information about a newer version that contains a fix for this vulnerability.