CVEvulnerability

CVE-2019-7183

9.8 CRITICAL Published 2019-12-05 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2019-12-05
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-59

Description

This improper link resolution vulnerability allows remote attackers to access system files. To fix this vulnerability, QNAP recommend updating QTS to their latest versions.

Affected configurations

• qnap qts 4.2.6 • qnap qts 4.3.3.0868 • qnap qts 4.3.3.0998 • qnap qts 4.3.4.0899 • qnap qts 4.3.4.1029 • qnap qts 4.3.6.0895 • qnap qts 4.3.6.0907 • qnap qts 4.3.6.0923 • qnap qts 4.3.6.0944 • qnap qts 4.3.6.0959 • qnap qts 4.3.6.0979 • qnap qts 4.3.6.0993 • qnap qts 4.3.6.1013 • qnap qts 4.3.6.1033 • qnap qts 4.4.1.0948 • qnap qts 4.4.1.0949 • qnap qts 4.4.1.0978 • qnap qts 4.4.1.0998 • qnap qts 4.4.1.0999 • qnap qts 4.4.1.1031 • qnap qts 4.4.1.1033 • qnap qts 4.4.1.1064 • qnap qts 4.4.1.1081 • qnap qts 4.4.1.1086 • qnap qts 4.4.1.1101

Related

Weakness · CWE (1)

  • CWE-59 Improper Link Resolution Before File Access weakness

References