H3XAOperational intelligence
Live analytical pictureEvidence before assessment
Threat intelligence / Vulnerability

CVE-2019-7194

QNAP devices running Photo Station contain an external control of file name or path vulnerability allowing remote attackers to access or modify system files.

Vulnerability
TypeVulnerability
External ID—
First seen2022-06-08
Last seen2022-06-08

Confidence

—

QNAP devices running Photo Station contain an external control of file name or path vulnerability allowing remote attackers to access or modify system files.

Labels

exploitedkevransomware

CISA KEV context

Vendor / productQNAP Photo Station
Added2022-06-08
Due date2022-06-22
6 recorded

Relationships

mitigates
from Remediate CVE-2019-7194
Mitigation
related-to
to Manipulating Web Input to File System Calls
Technique
related-to
to Path Traversal
Technique
related-to
to Using Escaped Slashes in Alternate Encoding
Technique
related-to
to Using Slashes and URL Encoding Combined to Bypass Validation Logic
Technique
related-to
to Using Slashes in Alternate Encoding
Technique
2 external

References

nvd
CVE-2019-7194
open
cwe
CWE-22
open
Continue into the dataIntelligence explorerHow to read the graphEvidence & provenance