VULNERABILITY INTELLIGENCE

CVE-2019-7194

CVSS score9.8 CRITICAL
EPSS probability82.71%
CISA KEVKnown exploited vulnerability
Published2019-12-05
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Known Exploited Vulnerability

QNAP Photo Station Path Traversal Vulnerability

Vendor / product: QNAP / Photo Station

Description

This external control of file name or path vulnerability allows remote attackers to access or modify system files. To fix the vulnerability, QNAP recommend updating Photo Station to their latest versions.

Weakness classification

  • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Primary references