Description
An unquoted search path or element vulnerability has been reported to affect NetBak Replicator. If a local attacker gains a user account, they can then exploit the vulnerability to execute unauthorized code or commands. We have already fixed the vulnerability in the following version: NetBak Replicator 4.5.15.0807 and later
Problem types
Product status
4.5.x before 4.5.15.0807
Credits
Kazuma Matsumoto of GMO Cybersecurity by IERAE, Inc.
References
www.qnap.com/en/security-advisory/qsa-25-39
