✕

Rewterz Annual Threat Intelligence Report 2025 - Download Now

Request a Demo
Rewterz

Rewterz Threat Alert – SNAKE Ransomware – Active IOCs

July 6, 2021
Rewterz

Rewterz Threat Alert – FormBook Malware – Active IOCs

July 6, 2021

Rewterz Threat Advisory –CVE-2021-28809 – QNAP Improper Access Control Vulnerability

Severity

High

Analysis Summary

CVE-2021-28809

An improper access control vulnerability has been reported to affect certain legacy versions of HBS 3 (Hybrid Backup Sync). If exploited, this vulnerability allows attackers to compromise the security of the operating system.

Impact

  • Unauthorized Access

Affected Vendors

QNAP

Affected Products

  • QTS 4.3.6 HBS 3 v3.0.210507 and later
  • QTS 4.3.4 HBS 3 v3.0.210506
  • QTS 4.3.3 HBS 3 v3.0.210506

Remediation

  1. Log on to QTS or QuTS hero as administrator.
  2. Open the App Center and then click .
    A search box appears.
  3. Type “HBS 3 Hybrid Backup Sync” and then press ENTER.
    HBS 3 appears in the search results.
  4. Click Update.
    A confirmation message appears.
    Note: The Update button is not available if your HBS 3 is already up to date.
  5. Click OK.

Reading this advisory was a good start.

Make it a habit.

Rewterz publishes threat advisories ahead of mainstream cybersecurity media, informed by an AI-Native Autonomous SOC that sees regional threat actor activity in real time. Subscribe to receive each new advisory as it publishes, plus a monthly Middle East threat landscape brief drawn from our own SOC telemetry. For teams evaluating their detection coverage, a 30-minute consultation with a senior analyst is also available, at your pace, when you're ready.

Request a demo