CVE-2019-7194 — QNAP Photo Station Path Traversal Vulnerability

provenance: imported · CVE: CVE-2019-7194

CVE-2019-7194: QNAP Photo Station Path Traversal Vulnerability

CISA Known Exploited Vulnerability (KEV)


Vendor / project	QNAP
Product	Photo Station
Date added	2022-06-08
Due date	2022-06-22
Ransomware campaign use	Known

Description

QNAP devices running Photo Station contain an external control of file name or path vulnerability allowing remote attackers to access or modify system files.

Required action (CISA)

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2019-7194

References

NVD: https://nvd.nist.gov/vuln/detail/CVE-2019-7194
KEV catalog: https://www.cisa.gov/known-exploited-vulnerabilities-catalog