CVE-2019-7192 — QNAP Photo Station Improper Access Control Vulnerability

Known ransomware use CISA KEV listed Added June 8, 2022 Remediate by June 22, 2022

Description

QNAP NAS devices running Photo Station contain an improper access control vulnerability allowing remote attackers to gain unauthorized access to the system.

Required action

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2019-7192

Need help remediating this vulnerability?

Our team helps organizations patch, mitigate, and respond to CISA KEV advisories fast.

Talk to an engineer