CVE-2019-7192

KEV · Ransomware

QNAP Photo Station Improper Access Control Vulnerability

Vendor / Project: QNAP
Product: Photo Station
Date added: Jun 8, 2022
Due date: Jun 22, 2022
Known ransomware use: Known
CWEs: CWE-863

Description

QNAP NAS devices running Photo Station contain an improper access control vulnerability allowing remote attackers to gain unauthorized access to the system.

Required action

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2019-7192