CVEvulnerability
CVE-2015-7261
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2016-02-27
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 9.8 CRITICAL — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-255
Description
The FTP service in QNAP iArtist Lite before 1.4.54, as distributed with QNAP Signage Station before 2.0.1, has hardcoded credentials, which makes it easier for remote attackers to obtain access via a session on TCP port 21.
Affected configurations
• qnap iartist lite (<= 1.4.53.1)
• qnap signage station (<= 2.0)
Related
Weakness · not in database (1)
References
- http://www.kb.cert.org/vuls/id/444472 Third Party Advisory, US Government Resource
- http://www.kb.cert.org/vuls/id/444472 Third Party Advisory, US Government Resource