logo

CVE-2019-7194 - QNAP Photo Station Path Traversal Vulnerability

Project:QNAP

Product:Photo Station

Date Added:2022-06-08Due Date:2022-06-22

Vulnerability Name

QNAP Photo Station Path Traversal Vulnerability

Description

QNAP devices running Photo Station contain an external control of file name or path vulnerability allowing remote attackers to access or modify system files.

Known To Be Used in Ransomware Campaigns?

Known

Action

Apply updates per vendor instructions.

Additional Notes

https://nvd.nist.gov/vuln/detail/CVE-2019-7194