安全ID : QSA-25-39

Vulnerability in NetBak Replicator


  • 发布日期 : October 4, 2025

  • 通用漏洞披露 : CVE-2025-57714

  • 受影响产品: NetBak Replicator 4.5.x

严重程度

Important

状态

已解决


Summary

An unquoted search path or element vulnerability has been reported to affect NetBak Replicator. If a local attacker gains access to a user account, they can then exploit the vulnerability to execute unauthorized code or commands.

  

We have already fixed the vulnerability in the following version:

Affected Product Fixed Version
NetBak Replicator 4.5.x NetBak Replicator 4.5.15.0807 and later

Recommendation

To secure your device, we recommend regularly updating your QNAP utilities to the latest versions to benefit from vulnerability fixes. You can check the QNAP Utilities page to see the latest updates available to your device operating system.

  

附件

致谢: Kazuma Matsumoto of GMO Cybersecurity by IERAE, Inc.

修订历史:
V1.0 (October 4, 2025) - Published

选择规格

      显示更多 隐藏更多
      open menu
      back to top