If you have installed Fonz fun_plug (aka FFP), it's time to update the
bash command. This is especially so if your NAS is exposed to the Internet.
All bash version from 1.14 through 4.3 are vulnerable to the Shellshock bug. The stock version from FFP-0.7 is v4.1.011 which failed the system vulnerability check stated
here. Good news is
kylek has compiled v4.3.25 which is able to pass the test.
If you're using uwsiteloader script, you should know where to download the package but for those who doesn't, I have hosted it on
Mediafire site.