CVE-2018-19949Used in ransomware
QNAP Network Attached Storage (NAS)
QNAP NAS File Station Command Injection Vulnerability
What it is
A command injection vulnerability affecting QNAP NAS File Station could allow remote attackers to run commands.
What to do
Apply updates per vendor instructions.
Vendor notices and references
Description and required action as published by CISA. Full record at NVD.
Other QNAP entries on the list
- VioStor NVR QNAP VioStor NVR OS Command Injection Vulnerability CVE-2023-47565 · Dec 21, 2023
- Photo Station QNAP Photo Station Externally Controlled Reference Vulnerability CVE-2022-27593 · Sep 8, 2022
- Photo Station QNAP Photo Station Path Traversal Vulnerability CVE-2019-7195 · Jun 8, 2022
- Photo Station QNAP Photo Station Path Traversal Vulnerability CVE-2019-7194 · Jun 8, 2022
- QTS QNAP QTS Improper Input Validation Vulnerability CVE-2019-7193 · Jun 8, 2022
- Photo Station QNAP Photo Station Improper Access Control Vulnerability CVE-2019-7192 · Jun 8, 2022