Vulnerability in Roon Server

Summary

The QNAP security team has detected an attack campaign in the wild related to a vulnerability in Roon Server. QNAP NAS running the following versions of Roon Server may be susceptible to attack:

• Roon Server 2021-02-01 and earlier

Roon Labs has already fixed this vulnerability in the following versions:

• Roon Server 2021-05-18 and later

Recommendation

To fix the vulnerability, we recommend updating Roon Server to the latest version.

Updating Roon Server

1. Log on to QTS or QuTS hero as administrator.
2. Open the App Center and then click .
   A search box appears.
3. Type “Roon Server” and then press ENTER.
   Roon Server appears in the search results.
4. Click Update.
   A confirmation message appears.
   Note: The Update button is not available if your version is already up to date.
5. Click OK.
   The application is updated.