So what's to stop them loading a "patched" version of any other version of the firmware? I'm assuming 4.2.5 was the latest available when they figured it out. How did the original infection occur as a previous poster stated?
There's clearly something we're not being told about the vulnerability of these systems and their firmware.
QNAP are not the most upfront organisation. They repeatedly insisted I was using an incompatible UPS when the system sent a powerout signal to the UPS on power loss. I was forced to by another model in the same series of UPS (where the only difference was the battery size, no other difference) that was on the supported list. This also failed. They told me I'd bought a defective UPS. The UPS manufacturer got involved and low-and-behold a patch was issued to the firmware. No mention of UPS fixes in it but the problem went away. Blame-shifting deceitful bastards as far as I'm concerned.
Biting the hand that feeds IT
