Qnap Photo Station vulnerabilities

CVE-2017-20210 Critical · 9.8 CWE-200 Nov 11, 2025

Photo Station

Photo Station 5.4.1 & 5.2.7 include the security fix for the vulnerability related to the XMR mining programs identified by internal research.

CVE-2022-27593 Critical · 9.1 KEV Urgent · 77 Public exploit Ransomware CWE-610 Sep 8, 2022

QNAP Photo Station Externally Controlled Reference Vulnerability

An externally controlled reference to a resource vulnerability has been reported to affect QNAP NAS running Photo Station. If exploited, This could allow an attacker to modify system files. We have already fixed the vulnerability in the following versions: QTS 5.0.1: Photo Station 6.1.2 and later QTS 5.0.0/4.5.x: Photo Station 6.0.22 and later QTS 4.3.6: Photo Station 5.7.18 and later QTS 4.3.3: Photo Station 5.4.15 and later QTS 4.2.6: Photo Station 5.2.14 and later

CVE-2019-7194 Critical · 9.8 KEV Urgent · 89 Public exploit Ransomware CWE-22 Dec 5, 2019

QNAP Photo Station Path Traversal Vulnerability

This external control of file name or path vulnerability allows remote attackers to access or modify system files. To fix the vulnerability, QNAP recommend updating Photo Station to their latest versions.

CVE-2019-7195 Critical · 9.8 KEV Urgent · 89 Public exploit Ransomware CWE-22 Dec 5, 2019

QNAP Photo Station Path Traversal Vulnerability

This external control of file name or path vulnerability allows remote attackers to access or modify system files. To fix the vulnerability, QNAP recommend updating Photo Station to their latest versions.

CVE-2019-7192 Critical · 9.8 KEV Urgent · 93 Public exploit Ransomware CWE-863 Dec 5, 2019

QNAP Photo Station Improper Access Control Vulnerability

This improper access control vulnerability allows remote attackers to gain unauthorized access to the system. To fix these vulnerabilities, QNAP recommend updating Photo Station to their latest versions.