QNAP Newsroom

Taipei, Taiwan, February 1, 2022 - Recently the QNAP Product Security Incident Response Team (PSIRT) detected that cybercriminals are taking advantage of a patched vulnerability, described in the QNAP Security Advisory (QSA-21-57), to launch a cyberattack. On January 27, 2022, QNAP set the patched versions of system software as “Recommended Version”. If auto update for “Recommended Version” is enabled on your QNAP NAS, the system will automatically update to certain OS version to enhance security and protection of your QNAP NAS, mitigating the attack from criminals.

What is the “Auto Update” feature?

QNAP actively updates NAS system software to ensure that each of our products runs efficiently throughout every stage of its lifecycle. These updates include feature updates, bug fixes, and security patches. To allow users to obtain the latest version of system software more easily, QNAP has introduced the auto update to “Latest Version” feature in QTS 4.5.0 / QuTS hero h4.5.0. Further, an auto update to "Recommended Version" feature is implemented in QTS 4.5.3 / QuTS hero h4.5.3 to give users more flexibility. The differences between "Recommended Version" and “Latest Version” are shown below:

We understand that services could be interrupted during the update. We are constantly looking for ways to improve our products. Future system software updates may include changes that help users better manage the update process.

The definition and release policy of “Recommended Version”

The Recommended Version includes feature and security fixes from previous releases. To avoid frequent interruptions of NAS services due to auto updates, QNAP will only appoint a certain version with major fixes as the “Recommended Version” to assist users in updating their NAS.

How to disable Auto Update?

To avoid NAS services from being interrupted by the "Auto Update" feature, you can view Auto Update settings and adjust them accordingly to disable the "Auto Update" feature. However, QNAP recommends that users regularly check for updates, and arrange the update schedule accordingly, to enhance the security of QTS / QuTS hero.

• "Control Panel" -> “System” -> "Firmware Update" -> "Auto Update"

• Uncheck "Recommended Version" and "Latest Version" to disable the "Auto Update" feature.

How Auto Update works

1. QTS / QuTS hero will periodically contact the QNAP software update server to obtain the latest system software information. When an update is available, your NAS will send a notification, if the notification function is set. When logging in to the QTS/QuTS hero portal, a reminder will also be shown.
2. If the auto update for "Latest Version" feature is enabled, QTS / QuTS hero will check whether the installed version is newer than the "Latest Version". If the installed version is older than the "Latest Version", your NAS will update and reboot according to the auto update schedule.
3. If the auto update for "Recommended Version" feature is enabled, QTS / QuTS hero will check whether the installed version is newer than the "Recommended Version". If the installed version is older than the "Recommended Version", your NAS will update and reboot according to the auto update schedule.