CVE-2015-7262: High severity qnap iartist lite vulnerability
QNAP iArtist Lite before 1.4.54, as distributed with QNAP Signage Station before 2.0.1, allows remote authenticated users to gain privileges by registering an executable file, and then waiting for this file to be run in a privileged context after a reboot.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-7262?
CVE-2015-7262 has a medium severity rating due to the potential for privilege escalation by remote authenticated users.
How do I fix CVE-2015-7262?
To fix CVE-2015-7262, upgrade QNAP iArtist Lite to version 1.4.54 or later and QNAP Signage Station to version 2.0.1 or later.
Who is affected by CVE-2015-7262?
CVE-2015-7262 affects users of QNAP iArtist Lite versions earlier than 1.4.54 and QNAP Signage Station versions earlier than 2.0.1.
What kind of attacks does CVE-2015-7262 allow?
CVE-2015-7262 allows remote authenticated users to gain elevated privileges by registering malicious executable files.
When was CVE-2015-7262 discovered?
CVE-2015-7262 was disclosed in 2015, highlighting vulnerabilities in specific versions of QNAP software.