QNAP
11 vulnerabilities in QNAP products that CISA lists as exploited.
| CVE | Vendor | Product | Name | Added | Fix due | Ransomware |
|---|---|---|---|---|---|---|
| CVE-2023-47565 | QNAP | VioStor NVR | QNAP VioStor NVR OS Command Injection Vulnerability | 21 Dec 2023 | 11 Jan 2024 | Unknown |
| CVE-2022-27593 | QNAP | Photo Station | QNAP Photo Station Externally Controlled Reference Vulnerability | 8 Sep 2022 | 29 Sep 2022 | Known |
| CVE-2019-7192 | QNAP | Photo Station | QNAP Photo Station Improper Access Control Vulnerability | 8 Jun 2022 | 22 Jun 2022 | Known |
| CVE-2019-7193 | QNAP | QTS | QNAP QTS Improper Input Validation Vulnerability | 8 Jun 2022 | 22 Jun 2022 | Known |
| CVE-2019-7194 | QNAP | Photo Station | QNAP Photo Station Path Traversal Vulnerability | 8 Jun 2022 | 22 Jun 2022 | Known |
| CVE-2019-7195 | QNAP | Photo Station | QNAP Photo Station Path Traversal Vulnerability | 8 Jun 2022 | 22 Jun 2022 | Known |
| CVE-2018-19943 | QNAP | Network Attached Storage (NAS) | QNAP NAS File Station Cross-Site Scripting Vulnerability | 24 May 2022 | 14 Jun 2022 | Known |
| CVE-2018-19949 | QNAP | Network Attached Storage (NAS) | QNAP NAS File Station Command Injection Vulnerability | 24 May 2022 | 14 Jun 2022 | Known |
| CVE-2018-19953 | QNAP | Network Attached Storage (NAS) | QNAP NAS File Station Cross-Site Scripting Vulnerability | 24 May 2022 | 14 Jun 2022 | Known |
| CVE-2020-2509 | QNAP | QNAP Network-Attached Storage (NAS) | QNAP Network-Attached Storage (NAS) Command Injection Vulnerability | 11 Apr 2022 | 2 May 2022 | Unknown |
| CVE-2021-28799 | QNAP | Network Attached Storage (NAS) | QNAP NAS Improper Authorization Vulnerability | 31 Mar 2022 | 21 Apr 2022 | Known |