Vulnerabilidades do Qnap Photo Station

CVE-2017-20210 Crítica · 9.8 CWE-200 11/11/2025

Photo Station

Photo Station 5.4.1 & 5.2.7 include the security fix for the vulnerability related to the XMR mining programs identified by internal research.

CVE-2022-27593 Crítica · 9.1 KEV Urgente · 77 Exploit público Ransomware CWE-610 08/09/2022

QNAP Photo Station Externally Controlled Reference Vulnerability

An externally controlled reference to a resource vulnerability has been reported to affect QNAP NAS running Photo Station. If exploited, This could allow an attacker to modify system files. We have already fixed the vulnerability in the following versions: QTS 5.0.1: Photo Station 6.1.2 and later QTS 5.0.0/4.5.x: Photo Station 6.0.22 and later QTS 4.3.6: Photo Station 5.7.18 and later QTS 4.3.3: Photo Station 5.4.15 and later QTS 4.2.6: Photo Station 5.2.14 and later

CVE-2019-7194 Crítica · 9.8 KEV Urgente · 89 Exploit público Ransomware CWE-22 05/12/2019

QNAP Photo Station Path Traversal Vulnerability

This external control of file name or path vulnerability allows remote attackers to access or modify system files. To fix the vulnerability, QNAP recommend updating Photo Station to their latest versions.

CVE-2019-7195 Crítica · 9.8 KEV Urgente · 89 Exploit público Ransomware CWE-22 05/12/2019

QNAP Photo Station Path Traversal Vulnerability

This external control of file name or path vulnerability allows remote attackers to access or modify system files. To fix the vulnerability, QNAP recommend updating Photo Station to their latest versions.

CVE-2019-7192 Crítica · 9.8 KEV Urgente · 93 Exploit público Ransomware CWE-863 05/12/2019

QNAP Photo Station Improper Access Control Vulnerability

This improper access control vulnerability allows remote attackers to gain unauthorized access to the system. To fix these vulnerabilities, QNAP recommend updating Photo Station to their latest versions.