CVE-2015-7261
First published: Sat Feb 27 2016(Updated: )
The FTP service in QNAP iArtist Lite before 1.4.54, as distributed with QNAP Signage Station before 2.0.1, has hardcoded credentials, which makes it easier for remote attackers to obtain access via a session on TCP port 21.
Credit: cret@cert.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| QNAP iArtist Lite | <=1.4.53.1 | |
| QNAP Signage Station | <=2.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- collector/nvd-index
- agent/severity
- agent/weakness
- agent/references
- agent/author
- agent/type
- agent/event
- agent/description
- agent/softwarecombine
- agent/first-publish-date
- agent/last-modified-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/qnap
- canonical/qnap iartist lite
- version/qnap iartist lite/1.4.53.1
- canonical/qnap signage station
- version/qnap signage station/2.0