CVE-2019-7194
CRITICAL KEV RANSOMWARE NUCLEIQNAP Photo Station - Path Traversal
Title source: llmExploitation Summary
CVE-2019-7194 is actively exploited and listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added June 8, 2022, with confirmed use in ransomware campaigns.
EIP tracks 1 public exploit from researchers including Henry Huang, including a Metasploit module auxiliary/gather/qnap_lfi.
A Nuclei detection template is also available.
AI-analyzed exploit summary This Metasploit module exploits a local file inclusion (LFI) vulnerability in QNAP QTS and Photo Station, allowing unauthenticated attackers to download sensitive files such as /etc/shadow. It retrieves album IDs and access codes to perform the LFI attack.
Description
This external control of file name or path vulnerability allows remote attackers to access or modify system files. To fix the vulnerability, QNAP recommend updating Photo Station to their latest versions.
Exploits (1)
This Metasploit module exploits a local file inclusion (LFI) vulnerability in QNAP QTS and Photo Station, allowing unauthenticated attackers to download sensitive files such as /etc/shadow. It retrieves album IDs and access codes to perform the LFI attack.
Nuclei Templates (1)
content-length:"580 "http server 1.0"" || http.title:"photo station" || http.title:"qnap"
title="photo station" || title="qnap"
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H