Insecure Library Loading Vulnerability in QVPN Device Client

Summary

CVE-2022-27595 is a critical insecurity identified within QNAP's QVPN Device Client, specifically involving an insecure library loading flaw. This vulnerability permits local attackers, who have obtained user-level access, to potentially execute malicious code or commands within the environment. This threat highlights the importance of updating to the latest versions, specifically QVPN Windows 2.0.0.1316 and 2.0.0.1310 or later, to mitigate the risks associated with this vulnerability. For further information, please refer to the official security advisory.

Refferences