CVE

CVE-2019-7194

P1⬤ KNOWN RANSOMWARE USE

QNAP Photo Station Path Traversal Vulnerability

QNAP · Photo Station

Date added (CISA)

2022-06-08

Remediation due

2022-06-22

Known ransomware use

Yes

Remediation priority

P1 — known ransomware use · past CISA due date

Description

QNAP devices running Photo Station contain an external control of file name or path vulnerability allowing remote attackers to access or modify system files.

Source: NVD ↗ · CISA KEV Catalog ↗