CVE-2019-7195

CRITICALCISA KEV

9.8

Beschreibung

This external control of file name or path vulnerability allows remote attackers to access or modify system files. To fix the vulnerability, QNAP recommend updating Photo Station to their latest versions.

CVE Details

CVSS v3.1 Bewertung9.8

SchweregradCRITICAL

CVSS VektorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AngriffsvektorNETWORK

KomplexitatLOW

Erforderliche PrivilegienNONE

BenutzerinteraktionNONE

Veroffentlicht12/5/2019

Zuletzt geandert10/27/2025

Quellekev

Honeypot-Sichtungen0

CISA KEV

HerstellerQNAP

ProduktPhoto Station

SchwachstellennameQNAP Photo Station Path Traversal Vulnerability

KEV Aufnahmedatum2022-06-08

Behebungsfrist2022-06-22

Ransomware-NutzungKnown

Betroffene Produkte

qnap:photo_stationqnap:qts

Schwachen (CWE)

CWE-22CWE-22

Referenzen

http://packetstormsecurity.com/files/157857/QNAP-QTS-And-Photo-Station-6.0.3-Remote-Command-Execution.html(security@qnapsecurity.com.tw)

https://www.qnap.com/zh-tw/security-advisory/nas-201911-25(security@qnapsecurity.com.tw)

http://packetstormsecurity.com/files/157857/QNAP-QTS-And-Photo-Station-6.0.3-Remote-Command-Execution.html(af854a3a-2127-422b-91ae-364da2661108)

https://www.qnap.com/zh-tw/security-advisory/nas-201911-25(af854a3a-2127-422b-91ae-364da2661108)

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-7195(134c704f-9b21-4f2e-91b3-4a467353bcc0)

IOC Korrelationen

Keine Korrelationen erfasst

This product uses data from the NVD API but is not endorsed or certified by the NVD.