- Vendor / Project
- QNAP
- Product
- Photo Station
- Date added
- Jun 8, 2022
- Due date
- Jun 22, 2022
- Known ransomware use
- Known
- CWEs
- CWE-22
Description
QNAP devices running Photo Station contain an external control of file name or path vulnerability allowing remote attackers to access or modify system files.
Required action
Apply updates per vendor instructions.