CVEvulnerability
CVE-2015-7262
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2016-02-27
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 7.5 HIGH — CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 8.5 HIGH — AV:N/AC:M/Au:S/C:C/I:C/A:C
- Weaknesses
- CWE-18
Description
QNAP iArtist Lite before 1.4.54, as distributed with QNAP Signage Station before 2.0.1, allows remote authenticated users to gain privileges by registering an executable file, and then waiting for this file to be run in a privileged context after a reboot.
Affected configurations
• qnap iartist lite (<= 1.4.53.1)
• qnap signage station (<= 2.0)
Related
Weakness · not in database (1)
References
- http://www.kb.cert.org/vuls/id/444472 Third Party Advisory, US Government Resource
- http://www.kb.cert.org/vuls/id/444472 Third Party Advisory, US Government Resource