QNAP
11 CVEs in CISA KEV — 9 with confirmed ransomware use
Products
| CVE | Product | CVSS | EPSS | Added | Due | Flags | Description |
|---|---|---|---|---|---|---|---|
CVE-2022-27593 |
Photo Station | — | 0.8791 | 2022-09-08 | 2022-09-29 | RW | Certain QNAP NAS running Photo Station with internet exposure contain an externa |
CVE-2023-47565 |
VioStor NVR | — | 0.7328 | 2023-12-21 | 2024-01-11 | QNAP VioStar NVR contains an OS command injection vulnerability that allows auth | |
CVE-2019-7195 |
Photo Station | — | — | 2022-06-08 | 2022-06-22 | RW | QNAP devices running Photo Station contain an external control of file name or p |
CVE-2019-7194 |
Photo Station | — | — | 2022-06-08 | 2022-06-22 | RW | QNAP devices running Photo Station contain an external control of file name or p |
CVE-2019-7193 |
QTS | — | — | 2022-06-08 | 2022-06-22 | RW | QNAP QTS contains an improper input validation vulnerability allowing remote att |
CVE-2019-7192 |
Photo Station | — | — | 2022-06-08 | 2022-06-22 | RW | QNAP NAS devices running Photo Station contain an improper access control vulner |
CVE-2018-19953 |
Network Attached Storage (NAS) | — | — | 2022-05-24 | 2022-06-14 | RW | A cross-site scripting vulnerability affecting QNAP NAS File Station could allow |
CVE-2018-19949 |
Network Attached Storage (NAS) | — | — | 2022-05-24 | 2022-06-14 | RW | A command injection vulnerability affecting QNAP NAS File Station could allow re |
CVE-2018-19943 |
Network Attached Storage (NAS) | — | — | 2022-05-24 | 2022-06-14 | RW | A cross-site scripting vulnerability affecting QNAP NAS File Station could allow |
CVE-2020-2509 |
QNAP Network-Attached Storage (NAS) | — | — | 2022-04-11 | 2022-05-02 | QNAP NAS devices contain a command injection vulnerability which could allow att | |
CVE-2021-28799 |
Network Attached Storage (NAS) | — | — | 2022-03-31 | 2022-04-21 | RW | QNAP NAS running HBS 3 contains an improper authorization vulnerability which ca |