← CVE Radar
CVE-2019-7194QNAP Photo Station Path Traversal Vulnerability
This external control of file name or path vulnerability allows remote attackers to access or modify system files. To fix the vulnerability, QNAP recommend updating Photo Station to their latest versions.
9.8 CRITICALEPSS 82.71%⚡ Known Exploited (CISA KEV)NVD: Analyzed
Overview
Severity
| Score | Severity | Version | Vector String |
|---|---|---|---|
| 9.8 | CRITICAL | 3.1NVD | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| 7.5 | HIGH | 2.0NVD | AV:N/AC:L/Au:N/C:P/I:P/A:P |
CISA required action
⚡ Known exploited · remediation due Jun 22, 2022
Apply updates per vendor instructions.
Details
- CVE ID
- CVE-2019-7194
- Status
- Analyzed
- Assigner (CNA)
- qnap
- Published
- Dec 5, 2019
- Last modified
- 2026-06-17 02:40 UTC
- Weaknesses
Affected Products
As published by the CNA in the CVE record.
QNAP NAS devices running Photo Station1 version range
- QTS 4.4.1: Photo Station before version 6.0.3, QTS 4.3.4 - QTS 4.4.0: Photo Station before version 5.7.10, QTS 4.3.0 - QTS 4.3.3: Photo Station before version 5.4.9, QTS 4.2.6: Photo Station before version 5.2.11