CVE-2019-7194β€”QNAP Photo Station Path Traversal Vulnerability

PUBLISHEDvulnerability record
2022-06-08 Β· last modified June 21, 2025

Metadata

CVE ID:
CVE-2019-7194
Project:
QNAP
Product:
Photo Station
Date Added:
2022-06-08
Due Date:
2022-06-22
Last Updated:
June 21, 2025

Vulnerability Name

QNAP Photo Station Path Traversal Vulnerability

Description

QNAP devices running Photo Station contain an external control of file name or path vulnerability allowing remote attackers to access or modify system files.

Known To Be Used in Ransomware Campaigns?

Ransomware Status:
KNOWN

Action

Apply updates per vendor instructions.

Additional Notes

Related Weaknesses