coldbraid

CVE-2018-19949 QNAP Network Attached Storage (NAS)

A command injection vulnerability affecting QNAP NAS File Station could allow remote attackers to run commands.

CVSS
not scored

CWE-20CWE-77CWE-78

On CISA’s exploited list

QNAP NAS File Station Command Injection Vulnerability

Added
2022-05-24
Federal patch deadline
2022-06-14
Ransomware use
known