CVE-2019-7192 — QNAP Photo Station Improper Access Control Vulnerability

provenance: imported · CVE: CVE-2019-7192

CVE-2019-7192: QNAP Photo Station Improper Access Control Vulnerability

CISA Known Exploited Vulnerability (KEV)


Vendor / project	QNAP
Product	Photo Station
Date added	2022-06-08
Due date	2022-06-22
Ransomware campaign use	Known

Description

QNAP NAS devices running Photo Station contain an improper access control vulnerability allowing remote attackers to gain unauthorized access to the system.

Required action (CISA)

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2019-7192

References

NVD: https://nvd.nist.gov/vuln/detail/CVE-2019-7192
KEV catalog: https://www.cisa.gov/known-exploited-vulnerabilities-catalog