QNAP Systems Inc. Photo Station vulnerabilities

26 known vulnerabilities, 4 confirmed exploited in the wild (CISA KEV), 6 published in the last 12 months.

Exploited QNAP Systems Inc. Photo Station vulnerabilities

CVE-2022-27593 — QNAP Photo Station Externally Controlled Reference Vulnerability
CVE-2019-7195 — QNAP Photo Station Path Traversal Vulnerability
CVE-2019-7194 — QNAP Photo Station Path Traversal Vulnerability
CVE-2019-7192 — QNAP Photo Station Improper Access Control Vulnerability

CVE-2017-20210 — Photo Station (CVSS 9.8)
CVE-2024-12923 — Photo Station (CVSS 5.4)
CVE-2024-32770 — Photo Station (CVSS 5.4)
CVE-2024-32769 — Photo Station (CVSS 5.4)
CVE-2024-32768 — Photo Station (CVSS 5.4)
CVE-2024-32767 — Photo Station (CVSS 5.4)
CVE-2023-47221 — Photo Station (CVSS 4.9)
CVE-2023-47562 — Photo Station (CVSS 8.8)
CVE-2023-47561 — Photo Station (CVSS 5.4)
CVE-2022-27593 — QNAP Photo Station Externally Controlled Reference Vulnerability (CVSS 9.1) — exploited
CVE-2021-44057 — Improper authentication in Photo Station (CVSS 9.8)
CVE-2021-34356 — Stored XSS Vulnerability in Photo Station (CVSS 5.4)
CVE-2021-34355 — Stored XSS Vulnerability in Photo Station (CVSS 5.4)
CVE-2021-34354 — Stored Cross-site Scripting Vulnerability in Photo Station (CVSS 5.4)
CVE-2020-2502 — Cross-site Scripting Vulnerability in Photo Station (CVSS 6.1)
CVE-2020-2491 — Cross-site Scripting Vulnerability in Photo Station (CVSS 6.1)
CVE-2018-19956 — (CVSS 6.1)
CVE-2018-19955 — (CVSS 6.1)
CVE-2018-19954 — (CVSS 6.1)
CVE-2019-7195 — QNAP Photo Station Path Traversal Vulnerability (CVSS 9.8) — exploited
CVE-2019-7194 — QNAP Photo Station Path Traversal Vulnerability (CVSS 9.8) — exploited
CVE-2019-7192 — QNAP Photo Station Improper Access Control Vulnerability (CVSS 9.8) — exploited
CVE-2018-0722 — (CVSS 7.5)
CVE-2018-0715 — (CVSS 6.1)
CVE-2017-13073 — (CVSS 6.1)