vulnerability
QNAP QTS: CVE-2020-25686: DNSpooq Vulnerabilities in QTS
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 4 | (AV:N/AC:M/Au:N/C:N/I:P/A:N) | Jul 1, 2021 | Aug 4, 2025 | Oct 16, 2025 |
Severity
4
CVSS
(AV:N/AC:M/Au:N/C:N/I:P/A:N)
Published
Jul 1, 2021
Added
Aug 4, 2025
Modified
Oct 16, 2025
Description
DNSpooq vulnerabilities—including DNS cache poisoning and buffer overflow vulnerabilities—have been reported to affect certain versions of QTS. If exploited, these vulnerabilities allow attackers to perform remote code execution. QNAP has already fixed these vulnerabilities in the following versions: QTS 4.5.3.1652 build 20210428 and later QuTS hero h4.5.3.1670 build 20210515 and later QuTScloud c4.5.5.1656 build 20210503 and later
Solution
qnap-qts-upgrade-latest
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.