CVE-2019-7193

CRITICALCISA KEV

9.8

Beschreibung

This improper input validation vulnerability allows remote attackers to inject arbitrary code to the system. To fix the vulnerability, QNAP recommend updating QTS to their latest versions.

CVE Details

CVSS v3.1 Bewertung9.8

SchweregradCRITICAL

CVSS VektorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AngriffsvektorNETWORK

KomplexitatLOW

Erforderliche PrivilegienNONE

BenutzerinteraktionNONE

Veroffentlicht12/5/2019

Zuletzt geandert10/27/2025

Quellekev

Honeypot-Sichtungen0

CISA KEV

HerstellerQNAP

ProduktQTS

SchwachstellennameQNAP QTS Improper Input Validation Vulnerability

KEV Aufnahmedatum2022-06-08

Behebungsfrist2022-06-22

Ransomware-NutzungKnown

Betroffene Produkte

qnap:qts

Schwachen (CWE)

CWE-20

Referenzen

http://packetstormsecurity.com/files/157857/QNAP-QTS-And-Photo-Station-6.0.3-Remote-Command-Execution.html(security@qnapsecurity.com.tw)

https://www.qnap.com/zh-tw/security-advisory/nas-201911-25(security@qnapsecurity.com.tw)

http://packetstormsecurity.com/files/157857/QNAP-QTS-And-Photo-Station-6.0.3-Remote-Command-Execution.html(af854a3a-2127-422b-91ae-364da2661108)

https://www.qnap.com/zh-tw/security-advisory/nas-201911-25(af854a3a-2127-422b-91ae-364da2661108)

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-7193(134c704f-9b21-4f2e-91b3-4a467353bcc0)

IOC Korrelationen

Keine Korrelationen erfasst

This product uses data from the NVD API but is not endorsed or certified by the NVD.