FTP Service Vulnerability in QNAP iArtist Lite Affects Remote Access
CVE-2015-7261

9.8CRITICAL

Key Information:

Vendor

Qnap
Status
Iartist Lite
Signage Station
Vendor
CVE Published:
27 February 2016

What is CVE-2015-7261?

The FTP service in QNAP iArtist Lite prior to version 1.4.54, as well as QNAP Signage Station before version 2.0.1, contains hardcoded credentials. This design flaw enables remote attackers to easily gain unauthorized access to the system through TCP port 21, potentially compromising sensitive data.

References

http://www.kb.cert.org/vuls/id/444472
third-party-advisoryx_refsource_CERT-VN

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.