Security Advisory for Dnsmasq Vulnerabilities in Container Station

Summary

A number of Dnsmasq vulnerabilities have been discovered in Container Station. If exploited, these security issues may expose NAS devices using Container Station versions 1.7.2502 and earlier to possible remote code execution or denial-of-service attacks. They may also allow attackers to access sensitive information.

We have already patched these vulnerabilities in Container Station version 1.7.2569.

Recommendation

To resolve the issue, you must update Container Station to version 1.7.2569.

If you are using any of the following NAS models, you do not need to update Container Station since they already have the latest version:

• TS-128A
• TS-228A

Upgrading to Container Station 1.7.2569

1. Log on to QTS as administrator.
2. Open the App Center, and then click the Search icon.
   A search box appears.
3. Type “Container Station”, and then press ENTER.
   The Container Station application appears in the search results list.
4. Click Update.
   A confirmation message appears.
5. Click OK.
   The application is updated.