Vulnerability Description
This improper access control vulnerability allows remote attackers to gain unauthorized access to the system. To fix these vulnerabilities, QNAP recommend updating Photo Station to their latest versions.
CVSS Score
CRITICAL
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Qnap | Photo Station | < 6.0.3 |
| Qnap | Qts | 4.4.1 |
Related Weaknesses (CWE)
References
- http://packetstormsecurity.com/files/157857/QNAP-QTS-And-Photo-Station-6.0.3-RemExploitThird Party AdvisoryVDB Entry
- https://www.qnap.com/zh-tw/security-advisory/nas-201911-25Vendor Advisory
- http://packetstormsecurity.com/files/157857/QNAP-QTS-And-Photo-Station-6.0.3-RemExploitThird Party AdvisoryVDB Entry
- https://www.qnap.com/zh-tw/security-advisory/nas-201911-25Vendor Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-US Government Resource
FAQ
What is CVE-2019-7192?
CVE-2019-7192 is a vulnerability with a CVSS score of 9.8 (CRITICAL). This improper access control vulnerability allows remote attackers to gain unauthorized access to the system. To fix these vulnerabilities, QNAP recommend updating Photo Station to their latest versio...
How severe is CVE-2019-7192?
CVE-2019-7192 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2019-7192?
Check the references section above for vendor advisories and patch information. Affected products include: Qnap Photo Station, Qnap Qts.