9.8
Critical
CVE-2019-7192 QNAP Photo Station Improper Access Control Vulnerability
Active exploitation observed
· CISA KEV catalogue
Required action
Apply updates per vendor instructions.
Ransomware campaigns
Known to be used
Weakness
CWE-863
Description
This improper access control vulnerability allows remote attackers to gain unauthorized access to the system. To fix these vulnerabilities, QNAP recommend updating Photo Station to their latest versions.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| QNAP NAS devices running Photo Station | Versions not published |