CVE-2019-7183: Critical severity qnap qts vulnerability
Published Dec 5, 2019
·Updated
This improper link resolution vulnerability allows remote attackers to access system files. To fix this vulnerability, QNAP recommend updating QTS to their latest versions.
Affected Software
25 affected components
QNAP QTS=4.2.6
QNAP QTS=4.3.3.0868
QNAP QTS=4.3.3.0998
QNAP QTS=4.3.4.0899
QNAP QTS=4.3.4.1029
QNAP QTS=4.3.6.0895
QNAP QTS=4.3.6.0907
QNAP QTS=4.3.6.0923
QNAP QTS=4.3.6.0944
QNAP QTS=4.3.6.0959
QNAP QTS=4.3.6.0979
QNAP QTS=4.3.6.0993
QNAP QTS=4.3.6.1013
QNAP QTS=4.3.6.1033
QNAP QTS=4.4.1.0948-beta
QNAP QTS=4.4.1.0949-beta
QNAP QTS=4.4.1.0978-beta_2
QNAP QTS=4.4.1.0998-beta_3
QNAP QTS=4.4.1.0999-beta_3
QNAP QTS=4.4.1.1031-beta_4
QNAP QTS=4.4.1.1033-beta_4
QNAP QTS=4.4.1.1064
QNAP QTS=4.4.1.1081
QNAP QTS=4.4.1.1086
QNAP QTS=4.4.1.1101
Event History
Dec 5, 2019
CVE Published
via MITRE·04:41 PM
Data Sourced
via MITRE·04:41 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2019-7183?
CVE-2019-7183 is categorized as a high severity vulnerability due to its potential to allow remote attackers to access system files.
2
How do I fix CVE-2019-7183?
To mitigate CVE-2019-7183, update your QNAP QTS to the latest available version.
3
Which QNAP QTS versions are affected by CVE-2019-7183?
CVE-2019-7183 affects specific QNAP QTS versions, including 4.2.6 and various 4.3.x and 4.4.x releases.
4
Can I exploit CVE-2019-7183 remotely?
Yes, CVE-2019-7183 can be exploited remotely, allowing attackers access to sensitive system files.
5
Is there a patch available for CVE-2019-7183?
Yes, QNAP has released patches in the form of updates to QTS to address CVE-2019-7183.