CVE-2019-7192

CRITICALCISA KEV

9.8

Beschreibung

This improper access control vulnerability allows remote attackers to gain unauthorized access to the system. To fix these vulnerabilities, QNAP recommend updating Photo Station to their latest versions.

CVE Details

CVSS v3.1 Bewertung9.8

SchweregradCRITICAL

CVSS VektorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AngriffsvektorNETWORK

KomplexitatLOW

Erforderliche PrivilegienNONE

BenutzerinteraktionNONE

Veroffentlicht12/5/2019

Zuletzt geandert10/27/2025

Quellekev

Honeypot-Sichtungen0

CISA KEV

HerstellerQNAP

ProduktPhoto Station

SchwachstellennameQNAP Photo Station Improper Access Control Vulnerability

KEV Aufnahmedatum2022-06-08

Behebungsfrist2022-06-22

Ransomware-NutzungKnown

Betroffene Produkte

qnap:photo_stationqnap:qts

Schwachen (CWE)

CWE-863CWE-863

Referenzen

http://packetstormsecurity.com/files/157857/QNAP-QTS-And-Photo-Station-6.0.3-Remote-Command-Execution.html(security@qnapsecurity.com.tw)

https://www.qnap.com/zh-tw/security-advisory/nas-201911-25(security@qnapsecurity.com.tw)

http://packetstormsecurity.com/files/157857/QNAP-QTS-And-Photo-Station-6.0.3-Remote-Command-Execution.html(af854a3a-2127-422b-91ae-364da2661108)

https://www.qnap.com/zh-tw/security-advisory/nas-201911-25(af854a3a-2127-422b-91ae-364da2661108)

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-7192(134c704f-9b21-4f2e-91b3-4a467353bcc0)

IOC Korrelationen

Keine Korrelationen erfasst

This product uses data from the NVD API but is not endorsed or certified by the NVD.