Security Advisory for DLL Hijacking vulnerability in Qsync for Windows (exe)

Summary

One DLL Hijacking vulnerability was recently found in Qsync for Windows (exe). If exploited, this vulnerability may allow a remote attacker to run arbitrary code on the Windows machine.

We have already patched this issue in Qsync for Windows (exe) versions 4.2.3.0915 and later.

Recommendations

If you are using an affected version of QNAP Qsync for Windows (exe), you must update it to version 4.2.3.0915 or later to resolve this issue.

Updating Qsync for Windows

1. Log on to Windows.
2. Right-click on the Windows Taskbar.
   The Qsync window appears.
3. Click .
4. Click Check for Updates.
   An update notification message appears.
5. Click Update.
   The application is updated.