9.8
Critique
CVE-2019-7193 QNAP QTS Improper Input Validation Vulnerability
Exploitation active constatée
· catalogue CISA KEV
Action attendue
Apply updates per vendor instructions.
Campagnes de rançongiciel
Utilisation connue
Faiblesse
CWE-20
Description
This improper input validation vulnerability allows remote attackers to inject arbitrary code to the system. To fix the vulnerability, QNAP recommend updating QTS to their latest versions.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| QNAP NAS devices | Versions non publiées |
Autres CVE de QNAP NAS devices
Les 6 CVE de QNAP NAS devices →
CVE-2019-7183
This improper link resolution vulnerability allows remote attackers to access system files
Non notée
CVE-2019-7197
A stored cross-site scripting (XSS) vulnerability has been reported to affect multiple versions of QTS
Non notée
CVE-2018-0730
This command injection vulnerability in File Station allows attackers to execute commands on the affected device
Non notée
CVE-2018-0729
This command injection vulnerability in Music Station allows attackers to execute commands on the affected device
Non notée