QNAP 新聞室
掌握 QNAP 最新的新聞資訊、獎項並與我們團隊聯繫
QNAP Releases Qfixes for Samba Writable Share Vulnerability
Taipei, Taiwan, June 2, 2017 – The administrators of the open-source software Samba have disclosed a vulnerability in their software, which can be used to execute malicious code on affected devices. QNAP® Systems, Inc is committed to protecting the privacy and data security of our users and has released Qfixes for QNAP NAS to patch this vulnerability. QNAP urges users to install these Qfixes on their QNAP NAS to protect against unauthorized access.
Samba is a network protocol for file and printer sharing. The CVE-2017-7494 remote code execution vulnerability allows clients with write permission to upload a shared library to a shared folder, and then cause the server to load and execute it. By utilizing this exploit, malicious users can run any code on remote servers and obtain administrator privileges. QNAP has provided separate Qfixes for QTS version 4.3.x and 4.2.x. QNAP recommends that users update QTS to the latest version available for their NAS, and then install the Qfix.
To learn more about how QNAP safeguards cyber security, please visit QNAP Security Bulletins and Advisories
關於 QNAP
QNAP 命名源自於高品質網路設備製造商（Quality Network Appliance Provider），我們致力研發軟體應用，匠心優化硬體設計，並設立自有生產線以提供全面而先進的科技解決方案。QNAP 專注於儲存、網通及智慧視訊產品創新，並提供 Cloud NAS 解決方案，透過軟體訂閱制及多元化服務管道建構嶄新的科技生態圈。在 QNAP 的企業藍圖中，NAS 早已突破儲存裝置的框架，搭配雲基礎網路架構上的多項研發創新，協助客戶高效率導入人工智慧分析、邊緣運算及資訊整合應用，創造更大優勢與價值。
