QNAP Photo Station Improper Access Control Vulnerability
QNAP · Photo Station
Date added (CISA)
2022-06-08
Remediation due
2022-06-22
Known ransomware use
Yes
Remediation priority
P1 — known ransomware use · past CISA due date
Description
QNAP NAS devices running Photo Station contain an improper access control vulnerability allowing remote attackers to gain unauthorized access to the system.