VULNERABILITY INTELLIGENCE

CVE-2019-7193

CVSS score9.8 CRITICAL

EPSS probability14.37%

CISA KEVKnown exploited vulnerability

Published2019-12-05

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Known Exploited Vulnerability

QNAP QTS Improper Input Validation Vulnerability

Vendor / product: QNAP / QTS

Description

This improper input validation vulnerability allows remote attackers to inject arbitrary code to the system. To fix the vulnerability, QNAP recommend updating QTS to their latest versions.

Weakness classification

CWE-20: Improper Input Validation

Primary references

security@qnapsecurity.com.tw — Exploit, Third Party Advisory, VDB Entry
security@qnapsecurity.com.tw — Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Exploit, Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
134c704f-9b21-4f2e-91b3-4a467353bcc0 — US Government Resource