https://www.qnap.com/zh-tw/security-advisory/nas-201911-25

http://packetstormsecurity.com/files/157857/QNAP-QTS-And-Photo-Station-6.0.3-Remote-Command-Execution.html

The version of QNAP QTS installed on the remote host is affected by multiple vulnerabilities, as follows:

  - An improper input validation vulnerability that allows remote attackers to inject arbitrary code to the     system. (CVE-2019-7193)

  - Two external control of file name or path vulnerabilities that allow remote attackers to access or modify     system files. (CVE-2019-7195, CVE-2019-7194)

  - An improper access control vulnerability that allows remote attackers to gain unauthorized access to the     system. (CVE-2019-7192)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Photo Station running on the remote QNAP NAS is affected by multiple vulnerabilities, as follows:

  - This improper input validation vulnerability allows remote attackers to inject arbitrary code to the     system. To fix the vulnerability, QNAP recommend updating QTS to their latest versions. (CVE-2019-7193)

  - This improper access control vulnerability allows remote attackers to gain unauthorized access to the     system. To fix these vulnerabilities, QNAP recommend updating Photo Station to their latest versions.
    (CVE-2019-7192)

  - This external control of file name or path vulnerability allows remote attackers to access or modify     system files. To fix the vulnerability, QNAP recommend updating Photo Station to their latest versions.
    (CVE-2019-7194, CVE-2019-7195)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
162318	QNAP QTS 4.3.6 < 4.3.6 build 20190919 / 4.4.1 < 4.4.1 build 20190918 Multiple Vulnerabilities (NAS-201911-25)	Nessus	Misc.	critical
162137	QNAP Photo Station Multiple Vulnerabilities (NAS-201911-25)	Nessus	Misc.	critical

CVE-2019-7194

critical

Tenable Plugins

critical

critical