Firetruck

CVE-2019-7192

KEV · Ransomware
Updated Oct 21, 2025 · PUBLISHED
View KEV entry →

Description

QNAP NAS devices running Photo Station contain an improper access control vulnerability allowing remote attackers to gain unauthorized access to the system.

Full record on cve.org →

Affected packages

PackageVendor / ProductVersion rangeStatus
QNAP NAS devices running Photo Stationn/a / QNAP NAS devices running Photo StationQTS 4.4.1: Photo Station before version 6.0.3, QTS 4.3.4 - QTS 4.4.0: Photo Station before version 5.7.10, QTS 4.3.0 - QTS 4.3.3: Photo Station before version 5.4.9, QTS 4.2.6: Photo Station before version 5.2.11affected