CVE-2019-7192Used in ransomware
QNAP Photo Station
QNAP Photo Station Improper Access Control Vulnerability
What it is
QNAP NAS devices running Photo Station contain an improper access control vulnerability allowing remote attackers to gain unauthorized access to the system.
What to do
Apply updates per vendor instructions.
Vendor notices and references
Description and required action as published by CISA. Full record at NVD.
Other QNAP entries on the list
- VioStor NVR QNAP VioStor NVR OS Command Injection Vulnerability CVE-2023-47565 · Dec 21, 2023
- Photo Station QNAP Photo Station Externally Controlled Reference Vulnerability CVE-2022-27593 · Sep 8, 2022
- Photo Station QNAP Photo Station Path Traversal Vulnerability CVE-2019-7195 · Jun 8, 2022
- Photo Station QNAP Photo Station Path Traversal Vulnerability CVE-2019-7194 · Jun 8, 2022
- QTS QNAP QTS Improper Input Validation Vulnerability CVE-2019-7193 · Jun 8, 2022
- Network Attached Storage (NAS) QNAP NAS File Station Cross-Site Scripting Vulnerability CVE-2018-19953 · May 24, 2022