Vulnerability in QVPN Service

Summary

A vulnerability has been reported to affect QNAP NAS running QVPN Service 3.x. If exploited, the vulnerability allows attackers to run arbitrary code in the system.

We have already fixed the vulnerability in the following versions of QVPN Service:

• QVPN Service 3.0.760 (2021/12/17) and later

Recommendation

To fix the vulnerability, we recommend updating QVPN Service to the latest version.

Updating QVPN Service

1. Log on to QTS or QuTS hero as administrator.
2. Open the App Center and then click .
   A search box appears.
3. Enter "QVPN Service".
   QVPN Service appears in the search results.
4. Click Update.
   A confirmation message appears.
   Note: The Update button is not available if your application is already up to date.
5. Click OK.
   The application is updated.