CVE-2019-7193: QNAP QTS Improper Input Validation Vulnerability
First published: Thu Dec 05 2019(Updated: )
This improper input validation vulnerability allows remote attackers to inject arbitrary code to the system. To fix the vulnerability, QNAP recommend updating QTS to their latest versions.
Credit: security@qnapsecurity.com.tw security@qnapsecurity.com.tw
| Affected Software | Affected Version | How to fix |
|---|---|---|
| QNAP QTS | =4.3.6.0895 | |
| QNAP QTS | =4.3.6.0907 | |
| QNAP QTS | =4.3.6.0923 | |
| QNAP QTS | =4.3.6.0944 | |
| QNAP QTS | =4.3.6.0959 | |
| QNAP QTS | =4.3.6.0979 | |
| QNAP QTS | =4.3.6.0993 | |
| QNAP QTS | =4.3.6.1013 | |
| QNAP QTS | =4.3.6.1033 | |
| QNAP QTS | =4.4.1.0948-beta | |
| QNAP QTS | =4.4.1.0949-beta | |
| QNAP QTS | =4.4.1.0978-beta_2 | |
| QNAP QTS | =4.4.1.0998-beta_3 | |
| QNAP QTS | =4.4.1.0999-beta_3 | |
| QNAP QTS | =4.4.1.1031-beta_4 | |
| QNAP QTS | =4.4.1.1033-beta_4 | |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2019-7193?
CVE-2019-7193 is an improper input validation vulnerability in QNAP QTS.
How can remote attackers exploit CVE-2019-7193?
Remote attackers can exploit CVE-2019-7193 to inject arbitrary code to the system.
What is the severity of CVE-2019-7193?
CVE-2019-7193 has a severity level of 9.8 (critical).
How can I fix CVE-2019-7193?
To fix CVE-2019-7193, QNAP recommends updating QTS to the latest version.
Where can I find more information about CVE-2019-7193?
You can find more information about CVE-2019-7193 in the references provided: http://packetstormsecurity.com/files/157857/QNAP-QTS-And-Photo-Station-6.0.3-Remote-Command-Execution.html, https://www.qnap.com/zh-tw/security-advisory/nas-201911-25
- collector/nvd-index
- agent/type
- agent/softwarecombine
- agent/description
- agent/severity
- agent/title
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/author
- agent/weakness
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/first-publish-date
- exploited/true
- ransomware/true
- collector/cisa-known-exploited
- source/CISA
- agent/references
- agent/tags
- agent/event
- collector/nvd-cve
- vendor/qnap
- canonical/qnap qts
- version/qnap qts/4.3.6.0895
- version/qnap qts/4.3.6.0907
- version/qnap qts/4.3.6.0923
- version/qnap qts/4.3.6.0944
- version/qnap qts/4.3.6.0959
- version/qnap qts/4.3.6.0979
- version/qnap qts/4.3.6.0993
- version/qnap qts/4.3.6.1013
- version/qnap qts/4.3.6.1033
- version/qnap qts/4.4.1.0948-beta
- version/qnap qts/4.4.1.0949-beta
- version/qnap qts/4.4.1.0978-beta_2
- version/qnap qts/4.4.1.0998-beta_3
- version/qnap qts/4.4.1.0999-beta_3
- version/qnap qts/4.4.1.1031-beta_4
- version/qnap qts/4.4.1.1033-beta_4