coldbraid

CVE-2019-7195 QNAP Photo Station

QNAP devices running Photo Station contain an external control of file name or path vulnerability allowing remote attackers to access or modify system files.

CVSS
not scored

CWE-22

On CISA’s exploited list

QNAP Photo Station Path Traversal Vulnerability

Added
2022-06-08
Federal patch deadline
2022-06-22
Ransomware use
known