VULNERABILITY INTELLIGENCE
CVE-2019-7192
CVSS score9.8 CRITICAL
EPSS probability88.10%
CISA KEVKnown exploited vulnerability
Published2019-12-05
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Known Exploited Vulnerability
QNAP Photo Station Improper Access Control Vulnerability
Vendor / product: QNAP / Photo Station
Description
This improper access control vulnerability allows remote attackers to gain unauthorized access to the system. To fix these vulnerabilities, QNAP recommend updating Photo Station to their latest versions.
Weakness classification
- CWE-863: Incorrect Authorization
Primary references
- security@qnapsecurity.com.tw — Exploit, Third Party Advisory, VDB Entry
- security@qnapsecurity.com.tw — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Exploit, Third Party Advisory, VDB Entry
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
- 134c704f-9b21-4f2e-91b3-4a467353bcc0 — US Government Resource