What’s Vulnerable › Vulnerabilities
CVE-2015-7261
- Severity: critical (CVSS 9.8 v3.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 1.6% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2016-02-27 · updated 2026-06-17
- Weakness: CWE-255
Description
The FTP service in QNAP iArtist Lite before 1.4.54, as distributed with QNAP Signage Station before 2.0.1, has hardcoded credentials, which makes it easier for remote attackers to obtain access via a session on TCP port 21.
Affected products
- QNAP Iartist Lite: through 1.4.53.1
- QNAP Signage Station: through 2.0
References
Get alerted when CVE-2015-7261 or the next vulnerability affects your stack