This improper access control vulnerability allows remote attackers to gain unauthorized access to the system. To fix these vulnerabilities, QNAP recommend updating Photo Station to their latest versions.
https://www.qnap.com/zh-tw/security-advisory/nas-201911-25
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-7192