CVE-2019-7195Used in ransomware
QNAP Photo Station
QNAP Photo Station Path Traversal Vulnerability
What it is
QNAP devices running Photo Station contain an external control of file name or path vulnerability allowing remote attackers to access or modify system files.
What to do
Apply updates per vendor instructions.
Vendor notices and references
Description and required action as published by CISA. Full record at NVD.
Other QNAP entries on the list
- VioStor NVR QNAP VioStor NVR OS Command Injection Vulnerability CVE-2023-47565 · Dec 21, 2023
- Photo Station QNAP Photo Station Externally Controlled Reference Vulnerability CVE-2022-27593 · Sep 8, 2022
- Photo Station QNAP Photo Station Path Traversal Vulnerability CVE-2019-7194 · Jun 8, 2022
- QTS QNAP QTS Improper Input Validation Vulnerability CVE-2019-7193 · Jun 8, 2022
- Photo Station QNAP Photo Station Improper Access Control Vulnerability CVE-2019-7192 · Jun 8, 2022
- Network Attached Storage (NAS) QNAP NAS File Station Cross-Site Scripting Vulnerability CVE-2018-19953 · May 24, 2022