9.8
Critical
CVE-2019-7195 QNAP Photo Station Path Traversal Vulnerability
Active exploitation observed
· CISA KEV catalogue
Required action
Apply updates per vendor instructions.
Ransomware campaigns
Known to be used
Weakness
CWE-22
Description
This external control of file name or path vulnerability allows remote attackers to access or modify system files. To fix the vulnerability, QNAP recommend updating Photo Station to their latest versions.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| QNAP NAS devices running Photo Station | Versions not published |