CVE-2018-19949

KEV · Ransomware

QNAP NAS File Station Command Injection Vulnerability

View CVE record →

Vendor / Project: QNAP
Product: Network Attached Storage (NAS)
Date added: May 24, 2022
Due date: Jun 14, 2022
Known ransomware use: Known
CWEs: CWE-20, CWE-77, CWE-78

Description

A command injection vulnerability affecting QNAP NAS File Station could allow remote attackers to run commands.

Required action

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2018-19949