Multiple Vulnerabilities in HBS 3 Hybrid Backup Sync (PWN2ONW 2025)

Summary

Multiple vulnerabilities have been reported to affect HBS 3 Hybrid Backup Sync. We have already fixed the vulnerabilities in the following version:

• CVE-2025-62840: Generation of error message containing sensitive information vulnerability, If an attacker gains local network access, they can then exploit the vulnerability to read application data.
• CVE-2025-62842: External control of file name or path vulnerability, If an attacker gains local network access, they can then exploit the vulnerability to read or modify files or directories.

Recommendation

To fix the vulnerabilities, we recommend updating HBS 3 Hybrid Backup Sync to the latest version.

For increased security, we also recommend users to change all passwords.

Updating HBS 3 Hybrid Backup Sync

1. Log on to QTS or QuTS hero as an administrator.
2. Open App Center and then click .
   A search box appears.
3. Type "HBS 3 Hybrid Backup Sync" and then press ENTER.
   HBS 3 Hybrid Backup Sync appears in the search results.
4. Click Update.
   A confirmation message appears.
   Note: The Update button is not available if your HBS 3 Hybrid Backup Sync is already up to date.
5. Click OK.
   The system updates the application.