QNAP QTS 4.2.6 build 20171026, QTS 4.3.3 build 20170727 and earlier allows remote attackers to obtain potentially sensitive information (firmware version and running services) via a request to sysinfoReq.cgi.
| Software | From | Fixed in |
|---|---|---|
| qnap / qts | 4.3.3 | 4.3.3.x |
| qnap / qts | 4.2.6 | 4.2.6.x |