QNAP NAS application Media Streaming add-on version 421.1.0.2, 430.1.2.0, and earlier does not authenticate requests properly. Successful exploitation could lead to change of the Media Streaming settings, and leakage of sensitive information of the QNAP NAS.
| Software | From | Fixed in |
|---|---|---|
| qnap / media_streaming_add-on | - | 430.1.2.0.x |
| qnap / media_streaming_add-on | - | 421.1.0.2.x |