Path Traversal Vulnerability in QNAP Photo Station
CVE-2018-0722

7.5HIGH

Key Information:

Vendor
Qnap
Status
Photo Station
Vendor
CVE Published:
1 February 2019

Summary

A path traversal vulnerability exists in QNAP Photo Station that can be exploited by remote attackers. This issue allows unauthorized access to sensitive information on the device, potentially exposing private data stored on it. Users of affected versions should take immediate action to secure their devices and prevent unauthorized access.

Affected Version(s)

Photo Station Photo Station versions: 5.7.2 and earlier in QTS 4.3.4, 5.4.4 and earlier in QTS 4.3.3, 5.2.8 and earlier in QTS 4.2.6

References

https://www.qnap.com/zh-tw/security-advisory/nas-201901-14
x_refsource_CONFIRM

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.